Your search engine is now part of the malware delivery chain. A campaign pushing fake ChatGPT and Claude desktop apps is climbing Google results, and the installers inside look legitimate because, technically, they are.
Check Point Research tracked the operation, according to Android Headlines. Fake GitHub pages rank high in search, and they hand out a ZIP file. Inside is a genuine, digitally signed installer from OpenAI or Anthropic, plus a rogue file called winmm.dll. When you run the real setup file, Windows loads the malicious library sitting next to it. That technique is DLL sideloading. The signature checks out because the signed file is untouched. The poison is the neighbor.
The loader is built to stay quiet. Gridinsoft’s analysis, as relayed by NotebookCheck, says it pushes users to grant administrator permissions and then settles deep into system folders. It doesn’t phone home to an obviously shady server. It reads a Telegram channel profile picture and queries Google DNS records to get its instructions. Burying command traffic inside ordinary services is a smart way to dodge antivirus tools that look for suspicious destinations. And for a network defender, blocking Telegram and Google DNS is not a realistic option.
The payload here is a cryptominer that pauses when you move your mouse, so you won’t notice the slowdown. The code skips machines with Russian or neighboring keyboard layouts, leaving Ukrainian systems as the only regional target. That is a familiar fingerprint, and it says something about who might be behind it.
But the miner is the least worrying part. The loader can run any remote command. Swapping a miner for a password stealer or remote access tool is a trivial change, and the browser sessions, saved credentials, and AI chat histories on your machine are worth far more than a few cycles of CPU. Earlier versions of this loader hit developers in June 2026 by posing as the Cursor AI coding tool. The lure changes. The mechanism stays.
Security Brigade CTO Yash Kadakia pointed out that a valid signature alone no longer proves a package is safe. That should change how people think about trust. A signature tells you who built one file. It says nothing about what else is in the folder.
This fits a wider pattern. Hype around AI tools creates a flood of people searching for downloads, and attackers use SEO and trusted platforms like GitHub to catch them. Google’s ranking, once again, is doing the attacker’s marketing.
If you ran one of these installers, disconnect from the internet and check system folders for stray files like winmm.dll. Better, avoid the problem. Get desktop AI apps from the Microsoft Store or the developer’s own website, typed in directly. A top search result or a GitHub repo with a polished readme proves nothing.