Malware Attack Targets Hugging Face Users with Fake OpenAI Repository
A recent cybersecurity incident has raised alarms as a malicious repository on Hugging Face impersonating OpenAI’s “Privacy Filter” project delivered dangerous information-stealing malware to unsuspecting Windows users. The repository, which briefly topped the platform’s trending list, was downloaded over 244,000 times before being removed.
Researchers from HiddenLayer discovered the attack, revealing that the fake repository contained a deceptive script designed to fetch and execute infostealer malware. This malware targets sensitive data such as browser cookies, saved passwords, and cryptocurrency wallet information.
While the exact number of affected users remains unclear, those who downloaded from the malicious repository are urged to take immediate action. Users should reimage their machines, rotate credentials, and invalidate browser sessions.
Risk Level: High
To protect against similar threats, always verify the authenticity of repositories before downloading and use robust security software.
Source: View Original Report
