En bref
Attackers are uploading fake installers and plugins for popular software such as ChatGPT, Claude, AutoTune, Kontakt and Ableton Live to GitHub and SourceForge. Compromised YouTube channels (with AI generated videos already passing 50,000...
Comment ca fonctionne
Attackers are uploading fake installers and plugins for popular software such as ChatGPT, Claude, AutoTune, Kontakt and Ableton Live to GitHub and SourceForge. Compromised YouTube channels (with AI generated videos already passing 50,000...
Signaux d'alerte
- The installer or "plugin" asks you to open a terminal and manually copy paste a command from the README. The GitHub or SourceForge account is brand new, has no history, or reposts many unrelated "cracked" or "free" tools. The YouTube video promoting the link is AI generated, comes from a small or unrelated channel, or mixes random software tutorials
Que faire
- 1Download software only from the official vendor site or verified storefronts
- 2avoid GitHub/Sour
Source
malwarebytes
Source verifiee par Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/05/fake-software-on-github-and-sourceforge-distribute-deno-ratFAQ
Fake ChatGPT, Claude and gaming software on GitHub and SourceForge install a stealthy RAT est une vraie arnaque ?
Oui. Traitez le message, l'appel ou la demande de paiement comme suspect jusqu'a verification via un canal officiel.
Quels sont les premiers signaux ?
The installer or "plugin" asks you to open a terminal and manually copy paste a command from the README. The GitHub or SourceForge account is brand new, has no history, or reposts many unrelated "cracked" or "free" tools. The YouTube video promoting the link is AI generated, comes from a small or unrelated channel, or mixes random software tutorials
Que faire en premier ?
Download software only from the official vendor site or verified storefronts; avoid GitHub/Sour
LegalAudit peut-il verifier mon cas ?
Oui. Lancez le chat gratuit et collez le message, le lien, l'expediteur ou les details de paiement.