Search — “Yoba”

A brief item reports that the Yoba actor distributes fake GitHub projects posing as AI apps, with legitimately signed OpenAI and Anthropic binaries used to sideload a loader and an XMRig cryptominer. No source could be fetched, so these claims rest only on the brief item and are not confirmed by a primary source. Hunters should look for unexpected DLLs loaded beside signed AI-vendor binaries and XMRig-style mining process activity.