SPIN Unprocessed October 29, 2026 ai_technology cybersecurity
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
View original on thehackernews.comOverview
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba. The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a malware family called
SpinGraph analysis pending — check back after processing.
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
More from The Hacker News
View all →- 26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories
- The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers
- Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
- Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities
- Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
- Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO