Cybercriminals are exploiting the hype surrounding artificial intelligence to distribute cryptocurrency mining malware through fake desktop apps that mimic ChatGPT and Claude. According to Check Point Research, attackers are creating fake GitHub repositories and GitHub.io sites to promote fraudulent apps, including GPT-5.6 Sol, GPT-6 Astra and Claude Opus. The ZIP archives contain legitimate digitally signed executables alongside malicious DLLs loaded through DLL sideloading, making the attack difficult to detect. The malware ultimately installs the XMRig cryptocurrency miner and can pause its activity when it senses user activity to evade security controls.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
