Wie erkennen Sie Fake ChatGPT, Claude and gaming software on GitHub and SourceForge install a stealthy RAT?

Kurzfassung

Attackers are uploading fake installers and plugins for popular software such as ChatGPT, Claude, AutoTune, Kontakt and Ableton Live to GitHub and SourceForge. Compromised YouTube channels (with AI generated videos already passing 50,000...

Wie es funktioniert

Warnzeichen

The installer or "plugin" asks you to open a terminal and manually copy paste a command from the README. The GitHub or SourceForge account is brand new, has no history, or reposts many unrelated "cracked" or "free" tools. The YouTube video promoting the link is AI generated, comes from a small or unrelated channel, or mixes random software tutorials

Was tun

1Download software only from the official vendor site or verified storefronts
2avoid GitHub/Sour

Quelle

malwarebytes

Quelle geprueft vom Mythos Forensic Team

https://www.malwarebytes.com/blog/threat-intel/2026/05/fake-software-on-github-and-sourceforge-distribute-deno-rat

FAQ

Ist Fake ChatGPT, Claude and gaming software on GitHub and SourceForge install a stealthy RAT ein reales Betrugsmuster?

Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.

Was sind die ersten Warnzeichen?

The installer or "plugin" asks you to open a terminal and manually copy paste a command from the README. The GitHub or SourceForge account is brand new, has no history, or reposts many unrelated "cracked" or "free" tools. The YouTube video promoting the link is AI generated, comes from a small or unrelated channel, or mixes random software tutorials

Was sollte ich zuerst tun?

Download software only from the official vendor site or verified storefronts; avoid GitHub/Sour

Kann LegalAudit meinen Fall pruefen?

Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.