Tag: chatgpt
-
KI-Flaggschiffe als Köder Malware ‘Yoba” tarnt sich als ChatGPT- und Claude-App
Die Sicherheitsforscher von Check Point Research (CPR), der Forschungsabteilung von Check Point Software Technologies. haben eine Malware-Kampagne aufgedeckt, die gezielt das Interesse an bekannten KI-Tools ausnutzt. Unter dem Namen ‘Yoba” verbreiten Cyberkriminelle Schadsoftware über gefälschte Github-Projekte, die vermeintliche Desktop-Anwendungen von ChatGPT und Claude bewerben. Um ihre Downloads glaubwürdig wirken zu lassen, missbrauchen sie legitime, digital…
-
New ChatGPT Phishing Kit Uses Rotating WordPress Websites to Steal Payment Details and OTPs
A phishing campaign impersonating OpenAI is using disposable WordPress websites and live attacker oversight to steal payment card details and potentially capture one-time passwords. Fraudulent ChatGPT Plus billing emails warn that subscription payments have failed, directing recipients to counterfeit checkout pages where operators control the victim’s next step. The operation combines infrastructure churn with interactive…
-
Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers
Researchers found a chain of flaws that turned an ordinary public ChatGPT share link into attacker-controlled JavaScript running inside the victim’s signed-in session. OpenAI fixed the issue on October 26 and classified it as P1. The Parameter researchers’ full technical write-up says the bug earned a $5,000 bounty. High-Severity ChatGPT Flaw An attacker published a…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
Hackers Impersonate ChatGPT, Claude, and Perplexity AI Bots to Hunt for Passwords and API Keys
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexity, to probe organizations across multiple industries. On one October day, the campaign reached 48% of Cequence-protected organizations that received any…
-
KI-Flaggschiffe als Köder: Malware »Yoba« tarnt sich als ChatGPT- und Claude-App
Check Point Research hat eine Kampagne aufgedeckt, die über gefälschte GitHub-Projekte und legitim signierte Dateien von OpenAI und Anthropic Schadsoftware auf Windows-Rechner schleust. Die Projekte tauchten prominent in der Google-Suche auf. Die Sicherheitsforscher von Check Point Research (CPR), der Forschungsabteilung von Check Point® Software Technologies Ltd. , haben eine Malware-Kampagne aufgedeckt, die gezielt das Interesse an……
-
OpenAI says it’s doubling Pro usage limits and bringing Work features to Chat
OpenAI has just confirmed that it’s rolling out ChatGPT Work capabilities directly into regular Chat, while also combining usage allowances across ChatGPT and Codex. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-says-its-doubling-pro-usage-limits-and-bringing-work-features-to-chat/
-
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
A malicious ChatGPT share link could run an attacker’s code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed.The researchers reported the flaw through OpenAI’s bug bounty program on October 18, and OpenAI fixed it eight days later and rated it…
-
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
A malicious ChatGPT share link could run an attacker’s code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed.The researchers reported the flaw through OpenAI’s bug bounty program on October 18, and OpenAI fixed it eight days later and rated it…
-
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls Yoba, which uses the popularity of AI tools to spread a custom malware chain. The attackers build fake GitHub projects that pose as AI…
-
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls Yoba, which uses the popularity of AI tools to spread a custom malware chain. The attackers build fake GitHub projects that pose as AI…
-
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls Yoba, which uses the popularity of AI tools to spread a custom malware chain. The attackers build fake GitHub projects that pose as AI…
-
OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut
OpenAI says it won’t reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, and it also promised to keep Dots usage independent. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-doubles-chatgpt-pro-usage-limits-after-backlash-over-planned-50-percent-cut/
-
Lawsuit: ChatGPT Dispensed Fatal Medical Advice to Woman
Litigation Is Latest Against OpenAI Alleging AI Chatbot Safety, Danger Risks. OpenAI is facing a lawsuit alleging that inaccurate and dangerous medical advice dispensed by its artificial intelligence chatbot ChatGPT coached an epileptic young woman to drastically reduce and discontinue doses of a doctor-prescribed antiseizure drug, resulting in her preventable death. First seen on govinfosecurity.com…
-
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba.The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a…
-
Yoba malware hides in fake desktop versions of ChatGPT and Claude
Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/fake-chatgpt-claude-apps-github-yoba-malware-cryptominer/
-
Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries
Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/attackers-hide-malware-behind/
-
Fake AI Attacks Target US Firms as Researchers Warn of Corporate Credential Theft
ANY.RUN analyzed 1,258 sandbox submissions showing how fake ChatGPT and Claude downloads and setup guides steal corporate credentials and browser session data. First seen on hackread.com Jump to article: hackread.com/fake-ai-attacks-target-us-firms-credential-theft/
-
Hackers Use Signed ChatGPT and Claude Binaries to Deploy Yoba Malware
Hackers are exploiting growing interest in AI tools to spread Yoba malware through fraudulent GitHub projects that claim to offer non-existent desktop applications named GPT-5.6 Sol, GPT-6 Astra, and Claude Opus. According to Check Point Research, these repositories and GitHub Pages attracted users through apparent SEO poisoning, with download buttons that delivered malicious ZIP files.…
-
Tricks from the Past deployed via signed ChatGPT and Claude binaries
ey Points Introduction Over the past two months, we have been tracking a campaign that abuses the popularity of AI tools such as ChatGPT and Claude to spread a custom malware chain we call Yoba. The attackers use fake GitHub projects that pretend to be AI desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude…
-
GPT-6.1 Terra meets OpenAI’s Critical cyber threshold, and it’s cheaper than GPT-5.6 Terra
OpenAI released GPT-6.1 Terra, a model that operates desktop software, to all Plus, Pro, Enterprise, and Edu users in ChatGPT Work and Codex, and to developers through its API … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/gpt-6-1-terra-released/
-
New Malware Targets AI Coding Tools to Steal Login Tokens, SSH Keys, and Cloud Credentials
A newly observed infostealer called Aokigahara is targeting AI coding assistants, developer workstations, and cloud credentials, expanding credential theft beyond browsers and cryptocurrency wallets. The targets include Claude Code and Desktop, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot, Gemini CLI, and JetBrains AI Assistant. Rather than exploiting an identified vulnerability in these products, the malware…
-
Infostealer riding the AI Train
ey Points Introduction Infostealers commonly target browser passwords, session cookies, and cryptocurrency wallets. This malware combines those established capabilities with dedicated collection routines for AI applications and development tools. Its targets include Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, and GitHub Copilot, alongside cloud credentials and sensitive files from local development environments. This expanded targeting reflects…
-
ChatGPT Locked Chats Explained: How to Use It and What to Know
ChatGPT now lets users lock private conversations with a PIN or biometrics. Learn how Locked Chats works, its limitations, and the risks of resetting a PIN. The post ChatGPT Locked Chats Explained: How to Use It and What to Know appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-chatgpt-locked-chats-pin-biometric-privacy/
-
ChatGPT Can Now Do More in Chrome, but There’s a Security Trade-Off
OpenAI expands ChatGPT’s Chrome integration with tab access and browser automation. Learn what the update means for productivity, privacy, and enterprise security. The post ChatGPT Can Now Do More in Chrome, but There’s a Security Trade-Off appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-openai-chatgpt-chrome-browser-integration-privacy/
-
ChatGPT Chrome Extension Expands Browser Access to Read Open Tab Content
OpenAI has announced an expanded Chrome integration that lets ChatGPT gather information from open browser tabs and take action within the browser. This update introduces two distinct workflows: >>Chat,<>Work,<< which can control tabs to complete tasks. The announcement was made on ChatGPT's official account on […] The post ChatGPT Chrome Extension Expands Browser Access to…
-
Eight US States Sue OpenAI Over Alleged ChatGPT Safety Risks to Children
Eight US states have sued OpenAI over alleged ChatGPT safety risks to children. Here’s what the lawsuits claim and how the company is responding. The post Eight US States Sue OpenAI Over Alleged ChatGPT Safety Risks to Children appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-eight-states-sue-openai-chatgpt-child-safety/
-
New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads
ROMULUS, a shared ClickFix delivery platform operating across six identified servers, with confirmed routes distributing a trojanized Stardock package and LegionLoader. The discovery connects infrastructure from a recently documented ChatGPT Custom GPT abuse campaign to an independently investigated incident, exposing a reusable backend capable of delivering different malicious payloads. The investigation began after researchers found…
-
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/fake-claude-chatgpt-attacks-developers-risk