A crypto-mining and backdoor campaign that abused Hugging Face model repositories returned days after being taken down, with its most popular model downloaded over 28,000 times.
The vulnerability or weakness
The campaign exploited the trustremotecode option, allowing malicious models to run their own Python code on users' machines.
Earlier attacks and coverage
No earlier related attack in our archive yet.
Business impact
Organizations face financial losses and operational disruptions due to potential data breaches and system slowdowns from cryptocurrency mining.
Industries affected
The attack affects a wide range of industries, including finance, technology, and research.
Users affected
Users and customers may experience reduced system performance and unauthorized access to their machines.
Build these skills
Sources
- Hugging Face malware campaign returns to hijack GPUs for crypto mining (BleepingComputer)
