SecurityNotebookcheckabout 1 hour ago
Fake AI Apps Hide Malware via DLL Sideloading
2 min read
Check Point Research tracked the Yoba campaign for about two months, where fake ChatGPT and Claude apps hid malware next to signed installers. The malicious winmm.dll library loads via DLL sideloading, requesting administrator rights to install a scheduled task disguised as Windows Media Player.
Level
Hype check
Tap to vote and see what everyone thinks.
