// ChatgptHIGH
In October 2026, Check Point researchers disclosed the Yoba campaign distributing malicious fake ChatGPT and Claude desktop applications via GitHub and SEO poisoning. The trojanized installers, signed with spoofed OpenAI and Anthropic certificates, employed DLL sideloading to install a Monero miner that operated covertly and avoided detection in machines with Eastern European or Central Asian keyboard layouts.
// Get alerts for Chatgpt