Criminals are posing as AI desktop apps to sneak harmful software onto Windows computers. Here is how it works and how to stay safe.
Criminals are posing as desktop versions of ChatGPT and Claude to spread harmful software. If you want an AI tool on your computer, get it only from the company's own website or an official app store, not from a random search result or ad. If you already installed an unknown "AI app," treat your computer as unsafe and get it checked.
What is happening
Security firm Check Point found a campaign it calls Yoba, as Help Net Security reports. The researchers tracked it for two months. It spreads malware, which means software built to harm your computer or steal from you.
The criminals set up fake projects on GitHub. GitHub is a popular site where programmers share code and apps. The fake apps had names like GPT-5.6 Sol, GPT-6 Astra and Claude Opus. They were offered as ZIP files, which are compressed folders you download and open.
Check Point says its research does not show that ChatGPT, Claude, OpenAI or Anthropic were hacked. The criminals only borrow the trusted names.
This is part of a wider pattern. Emergent reported on October 17 that criminals were buying Google Ads that show up when people search for things like "download ChatGPT desktop." The ads led to copycat sites with harmful downloads. Back in 2025, Trend Micro described fake GitHub pages that spread malware disguised as game cheats, cracked software and crypto tools.
How the trick works
The fake pages appear near the top of Google results. This is called SEO poisoning. SEO means search engine optimization, the methods used to rank high in search. The sources describe the method a little differently. Check Point says the attackers tuned titles, descriptions and web addresses. Yahoo Tech describes criminals buying many posts that link to the page, so it looks popular.
Inside each ZIP file is a real program signed by OpenAI or Anthropic. Next to it sits a hidden harmful file called a DLL. A DLL is a helper file that programs load when they run. When you open the real program, it also loads the bad file. This trick is called DLL sideloading. It helps the malware get past security tools.
After that, the malware does several things:
- It sets itself to run three minutes after each time the computer starts.
- It disguises that setting as a Windows Media Player task made by Microsoft.
- It checks whether researchers are watching. Yahoo Tech says it can wait two weeks before acting.
- It reads a picture on a Telegram channel to find where to get its next part. The criminal can move to a new web address just by changing the picture.
- It installs XMRig, a program that mines Monero, a type of cryptocurrency. This uses your computer's power to make money for the criminals.
The miner pauses while you are using the computer. That makes it harder to notice.
Who is at risk
Anyone using a Windows computer who wants to try the newest AI tools is at risk. Small businesses are at risk too, since one worker's download can affect the whole office.
The malware skips computers set up with a Russian keyboard or some other languages from that region. Yahoo Tech lists Russia, Belarus, Kazakhstan and Uzbekistan. Help Net Security notes that Ukrainian is not on that skip list.
The bigger worry is what comes next. The malware can run any program the criminal sends. Yahoo Tech says that could include information stealers, which take passwords, or ransomware, which locks your files and demands payment. Check Point warns that future waves may deliver different malware.
How to stay safe
- Type the company's web address yourself. Do not click search ads for downloads.
- Check that the download link matches the company's official web address.
- Be careful with any "desktop app" for an AI tool from a third party. Emergent notes many AI services work only in a web browser or through official app stores.
- Be wary of app names that sound newer than anything the company has announced.
- Use trusted antivirus software and keep it updated.
- At work, ask before installing any new AI tool.
What to do if you were hit
If you downloaded one of these fake apps, act now:
- Disconnect the computer from the internet.
- Do not use it for banking, shopping or email until it is checked.
- Run a full scan with trusted antivirus software.
- From a different, clean device, change important passwords, starting with email and banking.
- If it is a work computer, tell your IT person right away.
Removing the miner alone may not be enough. Check Point advises organizations that find Yoba to treat it as a broader break-in and look beyond the miner. Help Net Security also notes the malware had very low detection rates, so a clean scan may not prove the computer is safe. When in doubt, have a professional check it.
Have a question about anything here? Email me at sales@appwt.com or call (888) 565-0171, and I will answer it.
Sources
- Yoba malware hides in fake desktop versions of ChatGPT and Claude - Help Net Security, Help Net Security, 2026-10-29
- Hackers Use Google Ads to Spread Fake AI Download Malware, Emergent, 2026-10-17
- AI Assisted Fake GitHub Repositories Fuel SmartLoader and LummaStealer Distribution, Trend Micro, 2025-03-11
- A new cybercrime campaign uses fake AI apps with real-sounding names to infect people curious to try the newest tools, Yahoo Tech, 2026-10-29
Tags
Frequently Asked Questions
Were ChatGPT or Claude hacked?
No. Check Point says its research does not show that ChatGPT, Claude, OpenAI or Anthropic were compromised. The criminals only used their names and real signed programs.
What is a cryptocurrency miner?
It is a program that uses a computer's power to create digital money. In this case, XMRig mines Monero for the criminals using your computer.
Is a download link at the top of Google always safe?
No. These fake pages ranked near the top of Google results, and other criminals bought Google Ads for fake AI downloads. Type the company's address yourself instead.
Will my antivirus catch this?
Not always. Help Net Security reports the malware had very low detection rates and used tricks to avoid being studied.
Is deleting the miner enough?
It may not be. The malware can run other programs the criminal sends, so Check Point advises treating it as a broader break-in.
Enjoyed this article?
Share it with your network
