Malicious Hugging Face Repo Spreads Windows Infostealer

Malicious Hugging Face Repo Spreads Windows Infostealer

A sophisticated malware campaign exploited the Hugging Face machine learning platform to distribute an information-stealing trojan to Windows users through a fake repository that briefly became the platform’s top trending project. This article has been indexed from CyberMaterial Read the original article: Malicious Hugging Face Repo Spreads Windows Infostealer The post Malicious Hugging Face Repo Spreads Windows Infostealer appeared first on I…

Fake OpenAI Hugging Face OpenAI Repo Pushed Infostealer Malware

A fake OpenAI-branded Hugging Face repo may have delivered infostealer malware to Windows users through a loader, PowerShell stage, and final Rust payload. The post Fake OpenAI Hugging Face OpenAI Repo Pushed Infostealer Malware appeared first on WinBuzzer.

Malicious Hugging Face model masquerading as OpenAI release hits 244K downloads

A malicious Hugging Face repository posing as an OpenAI release delivered infostealer malware to Windows systems and logged 244,000 downloads before being removed, raising fresh concerns about how enterprises source and validate AI models from public repositories. The repository, named Open-OSS/privacy-filter, impersonated OpenAI’s legitimate Privacy Filter release, copied its model card almost word-for-word, and included a malicious loader.py f…