Fake ChatGPT and Claude applications distribute cryptocurrency miners using signed executables

In a campaign dubbed Yoba, malicious loaders and cryptocurrency miners are distributed under the guise of desktop applications for OpenAI ChatGPT and Anthropic Claude. Fake GitHub projects contain YobaLoader components that use DLL sideloading with legitimate, digitally signed executables.