
- Attackers typosquatted an OpenAI repo on HuggingFace, distributing an infostealer disguised as a “privacy filter” model
- The malware disabled SSL checks, escalated privileges, and deployed the sefirah payload to steal credentials, crypto wallets, and system data
- The fake repo hit 244K downloads and briefly topped HuggingFace rankings before removal, with other linked malicious repos also taken down
Nvidia GeForce NOW, a cloud-based gaming service which streams high-performance PC games to other devices, suffered a cyberattack recently, and lost sensitive customer data. However, the data seems to be limited to one country only - Armenia.