Fake ChatGPT and Claude Installers Could Turn Your PC Into a Crypto Miner: Windows Users at Risk

People searching for ChatGPT or Claude downloads could end up infecting their Windows PCs without realizing it. Cybersecurity researchers have uncovered a campaign in which attackers hide malware alongside genuine software from OpenAI and Anthropic, making fake AI downloads look trustworthy. Check Point Research published its findings on Oct. 27, 2026, after tracking the campaign, dubbed Yoba, for two months. The fake downloads appeared under names including GPT-5.6 Sol, GPT-6 Astra and Claude Opus. The attackers promoted them through GitHub repositories and web pages that appeared among Google's top search results. The danger is that someone could download what appears to be a legitimate AI installer, run it, and unknowingly allow malware onto their computer.