What Deno RAT Malware Is and Why AI Installers Are Being Abused
Deno RAT malware is a remote access Trojan built on the Deno JavaScript runtime that hides inside counterfeit installers, silently taking control of systems, stealing cryptocurrency wallets, and hijacking browsers for covert screen streaming. Attackers are abusing the hype around AI tools by publishing fake ChatGPT and Claude installers, along with cracked audio software, on GitHub and SourceForge. These “malware in AI installers” campaigns are aimed at creators, AI enthusiasts, gamers, and developers who trust community repositories and command-line installers. According to Malwarebytes, the malicious repositories instruct users to open a terminal and paste commands that download MSI installers or PowerShell scripts for both Windows and macOS. From there, the chain installs Scoop, WinGet, and the legitimate Deno runtime, then uses Deno to run a backdoor called DinDoor directly from a remote server, keeping much of the attack in memory and away from disk-based scans.
Inside the Infection Chain: From DinDoor Backdoor to Full Deno RAT Control
Once the fake ChatGPT downloads or other counterfeit installers run, DinDoor is fetched and executed via Deno as an in-memory backdoor. DinDoor sets persistence with a registry Run key, then reports system details to a command-and-control server before downloading additional payloads. In observed cases, one of these payloads is a Deno-based RAT previously tracked as Smokest, with code similarities suggesting a common author or team. This Deno RAT malware gives attackers full remote control: they can execute arbitrary commands and PowerShell scripts, manage files, launch or kill processes, and open SOCKS5 proxy tunnels for covert traffic. The campaign blends trusted tools—GitHub, SourceForge, Scoop, WinGet, and Deno—to appear normal in developer environments, avoiding security tools that focus on unsigned binaries or unfamiliar executables. For developers, the danger is a supply chain attack hiding in what looks like standard automation and package management.
How the RAT Steals Crypto and Streams Your Screen via Microsoft Edge
Beyond remote control, the Deno RAT is heavily focused on cryptocurrency wallet theft. Its built-in stealer module targets more than 50 cryptocurrency wallet extensions and 10 desktop wallet applications, including Atomic Wallet, Exodus, Electrum, and ByteCoin. It also pulls stored data from Chromium-based browsers such as Chrome, Brave, Edge, Opera, and Vivaldi, along with communication apps like Telegram, Discord, and Lightcord, enabling account takeovers and wider compromise. One standout feature is its method for covert screen streaming: the RAT quietly launches Microsoft Edge, connects to it through the Chrome DevTools Protocol, and injects a WebRTC page that streams encrypted video frames directly to the attacker. Traffic flows through a legitimate Edge process, making the feed hard to spot in normal network monitoring and giving operators a live view of sensitive information, including crypto operations, development environments, and authentication flows.
Why Developers and AI Enthusiasts Are Prime Supply Chain Targets
Developers and AI enthusiasts are attractive targets because they often rely on GitHub and SourceForge for community tools, scripts, and experimental AI clients. The attackers run compromised YouTube channels with AI-generated videos that promote these repositories, and those videos have already accumulated more than 50,000 views. Viewers are encouraged to install plugins or clients for ChatGPT, Claude, or popular audio tools, then paste terminal commands that launch the infection chain. GitHub accounts are rotated, with multiple repositories per account, so that new lures appear as old ones are reported and removed. Malwarebytes flagged and reported malicious repositories, and GitHub removed them, but new ones are likely to emerge. For developers, the real risk is a supply chain attack hiding in familiar workflows: cloning repos, running install scripts, and trusting package managers that appear legitimate while quietly deploying Deno RAT malware in AI installers.
Detection and Prevention: How to Spot Fake AI Installers and Stay Safe
To reduce GitHub security threats and avoid malware in AI installers, treat any unofficial ChatGPT or Claude client with suspicion. Always verify download sources against the official OpenAI or Anthropic documentation and avoid repositories promoted only through random YouTube videos. Before running installation commands, read scripts instead of blindly pasting them into a terminal, and check whether they unexpectedly install Scoop, WinGet, or Deno for a simple AI tool. On Windows and macOS, verify file signatures and publishers for MSI installers or packages wherever possible. Monitor for unusual registry Run keys, unexpected Edge processes, or unknown Deno tasks, which may signal DinDoor or a Deno RAT running in the background. Finally, protect cryptocurrency wallets by using hardware wallets where possible, limiting browser-based extensions, and isolating wallet activity from systems used for testing unofficial tools or cracked software.
