Fake ChatGPT and Claude apps hide malware next to signed installers
Fake desktop apps for ChatGPT and Claude are hosted on GitHub and rank high in Google results. Each download bundles a genuine, signed installer from OpenAI or Anthropic with a malicious DLL. Check Point found a cryptominer, but the loader can deliver other malware too. Here is how the scheme works…