Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables from OpenAI and Anthropic to load malicious code onto victims’ Windows systems.
The vulnerability or weakness
The technique exploits DLL sideloading, where a legitimate application loads a malicious dynamic-link library, and uses signed executables to appear legitimate.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations may face operational disruptions and financial losses due to potential data breaches and system compromises. Legal and reputational risks are also heightened.
Industries affected
All industries are potentially affected as the malware can target any organization using Windows systems.
Users affected
Users are at risk of having their systems compromised, leading to data theft, system damage, and potential financial losses. They should be cautious when downloading software from unverified sources.
