{"slug": "yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users", "title": "Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users", "summary": "Check Point Research uncovered a malware campaign dubbed Yoba that distributes malware through fake GitHub projects impersonating ChatGPT and Claude desktop applications while abusing legitimate, signed OpenAI and Anthropic executables to help load it. The campaign exploits user trust in new AI tools for social engineering even though the AI platforms themselves were not compromised, Check Point Research said.", "body_md": "As interest in new AI tools accelerates, cybercriminals are finding ways to exploit the trust surrounding them. Check Point Research (CPR) has uncovered Yoba, a malware campaign using fake GitHub projects impersonating supposed ChatGPT and Claude desktop applications, while abusing legitimate, signed OpenAI and Anthropic executables to help load malware. The campaign shows how the rush to access new AI tools is creating opportunities for social engineering, even when the AI platforms themselves have not been compromised. Key Findings Attackers used fake GitHub projects impersonating supposed ChatGPT and Claude desktop applications to distribute Yoba malware. Legitimate, signed OpenAI and Anthropic […]\n\nThe post [Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users](https://blog.checkpoint.com/research/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users/) appeared first on [Check Point Blog](https://blog.checkpoint.com).", "url": "https://wpnews.pro/news/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users", "canonical_source": "https://blog.checkpoint.com/research/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users/", "published_at": "2026-10-27 13:00:10+00:00", "updated_at": "2026-10-27 14:43:28.939321+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence"], "entities": ["Check Point Research", "Yoba", "OpenAI", "Anthropic", "ChatGPT", "Claude", "GitHub"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users", "markdown": "https://wpnews.pro/news/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users.md", "text": "https://wpnews.pro/news/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users.txt", "jsonld": "https://wpnews.pro/news/yoba-malware-abuses-signed-chatgpt-and-claude-binaries-to-target-ai-users.jsonld"}}