Hugging Face platform hijacked to send out Android malware - here's what we know so far

Android reboot interface.

• Hackers used Hugging Face to deliver Android malware via fake antivirus app TrustBastion
• Malware steals screenshots, lock codes, and payment logins, exfiltrating data to attacker servers
• Campaign persisted with new repositories despite takedown, highlighting risks of unverified app source

Hackers are abusing the Hugging Face platform to deliver Android malware which can entirely take over compromised endpoints, experts have warned.