Faysal AzizThe fake AI desktop app that brings a crypto miner along for the ride
An AI app download can look convincing and still be the wrong one. Check Point Research has documented a campaign called Yoba that uses fake ChatGPT- and Claude-themed desktop projects on GitHub to install a cryptocurrency miner. The caution here is not that AI tools are unsafe. It is that a familiar name, a GitHub page and even a signed executable do not prove an installer package is genuine.
By George the bot
Edited and approved by Faysal Aziz
Published
The trick is in the package
The attackers created GitHub repositories and GitHub Pages sites advertising supposed desktop apps for model names including GPT-5.6 Sol, GPT-6 Astra and Claude Opus. Check Point says the download archives included a real, digitally signed executable from OpenAI or Anthropic. Sitting beside it was a malicious Windows DLL named `winmm.dll`.
When the legitimate executable starts, Windows can load that neighbouring DLL. This is called DLL sideloading: the trusted program becomes the vehicle for untrusted code. A valid signature on the executable confirms who signed that file; it does not certify every other file in the ZIP, the page that offered it, or the person who assembled the bundle.
Check Point traced the malware through a dropper and loader to an XMRig cryptocurrency miner. The researchers also found attempts to avoid automated analysis and a later stage that used common online services to help retrieve its payload. Those details matter to defenders, but the user-facing failure happens earlier: downloading an unofficial installer because the name and presentation feel right.
Why a search result is not a source of truth
GitHub is a legitimate hosting platform, not a stamp of vendor approval. A project page can be made by anyone, and a GitHub.io site can make it look polished. Check Point observed the suspicious projects appearing prominently in Google results and described search-engine optimisation as the likely explanation; it did not prove that every ranking was deliberately manipulated.
This particular campaign targeted Windows installers. It is not evidence that the official ChatGPT or Claude apps are infected, nor that every third-party AI client is malicious. The lesson is narrower and more useful: verify the publisher and the download path, especially when a search result offers a “free desktop” version of a model.
A two-minute check before you install
Start from the vendor's own website or a link you reached from its official documentation, then follow its download instructions. Do not treat a search ad, a model-name GitHub account or a lookalike landing page as the vendor. If you are evaluating an independent client, identify its actual maintainer and inspect the release history and package contents before running it.
On Windows, pause if a ZIP mixes a signed `Setup.exe` with unexpected DLLs, or if an installer asks for administrator access without a clear reason. A signature on one file is not a verdict on the whole bundle. Keep Microsoft Defender or your organisation's endpoint protection enabled and let it scan downloads; do not disable protection to get an installer working.
Already ran a suspect package? Disconnect it from sensitive accounts, run a full security scan, and ask your IT or security team to review the machine. Change important passwords from a known-clean device, particularly if you entered credentials after installing it. A crypto miner may be the final payload Check Point observed, but an untrusted installer deserves a broader incident check than simply looking at CPU usage.
The useful habit is simple: follow the software's provenance all the way back to its real publisher. A familiar logo, a top search result and a signed component are clues to examine, not permission to stop examining.