dll sideloading

Yoba Crypto Miner Campaign Uses Signed AI Binaries to Deploy Malicious DLLs

Threat actors use signed OpenAI and Anthropic executables to sideload malicious DLLs and run crypto miners under the guise of AI desktop apps.