In breve
Attackers are uploading fake installers and plugins for popular software such as ChatGPT, Claude, AutoTune, Kontakt and Ableton Live to GitHub and SourceForge. Compromised YouTube channels (with AI generated videos already passing 50,000...
Come funziona
Attackers are uploading fake installers and plugins for popular software such as ChatGPT, Claude, AutoTune, Kontakt and Ableton Live to GitHub and SourceForge. Compromised YouTube channels (with AI generated videos already passing 50,000...
Indicatori rossi
- The installer or "plugin" asks you to open a terminal and manually copy paste a command from the README. The GitHub or SourceForge account is brand new, has no history, or reposts many unrelated "cracked" or "free" tools. The YouTube video promoting the link is AI generated, comes from a small or unrelated channel, or mixes random software tutorials
Cosa fare
- 1Download software only from the official vendor site or verified storefronts
- 2avoid GitHub/Sour
Fonte
malwarebytes
Fonte verificata da Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/05/fake-software-on-github-and-sourceforge-distribute-deno-ratFAQ
Fake ChatGPT, Claude and gaming software on GitHub and SourceForge install a stealthy RAT e una truffa reale?
Si. Tratta messaggi, chiamate o richieste di pagamento come sospette finche non le verifichi da un canale ufficiale.
Quali sono i primi segnali?
The installer or "plugin" asks you to open a terminal and manually copy paste a command from the README. The GitHub or SourceForge account is brand new, has no history, or reposts many unrelated "cracked" or "free" tools. The YouTube video promoting the link is AI generated, comes from a small or unrelated channel, or mixes random software tutorials
Cosa devo fare subito?
Download software only from the official vendor site or verified storefronts; avoid GitHub/Sour
LegalAudit puo controllare il mio caso?
Si. Apri la chat gratis e incolla messaggio, link, mittente o dati di pagamento per un triage.