Fake OpenAI Repository Hugging Face Infostealer Malware | MSSP Advisory

A fake OpenAI repository on Hugging Face distributed information-stealing malware disguised as a privacy filter tool, reaching the platform's trending list before removal. The malware targets Windows systems and steals credentials, browser data, and system information. Hugging Face has become a vector for malware distribution through impersonation of legitimate AI projects.

Your clients are downloading AI tools from Hugging Face repositories without verification, and stolen credentials from these attacks can bypass your security stack entirely. Any compromise of client credentials puts your remote access tools and management platforms at direct risk since attackers use stolen creds to pivot into MSSP infrastructure.

📬