Hugging Face platform hijacked to send out Android malware - here's what we know so far

Techradar • January 30, 2026

Hackers used Hugging Face to deliver Android malware via fake antivirus app TrustBastion · Malware steals screenshots, lock codes, and payment logins, ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hugging Face Misused for Android Malware and RAT Campaigns A new Android malware campaign has exploited the Hugging Face platform to distribute thousands of APK variants that collect credentials for financial services. Researchers from Bitdefender have identified this campaign as utilizing remote access trojans (RAT) and social engineering techniques, leveraging Hugging Face's reputation as a trusted hosting service to deliver malicious payloads at scale. 14 sources 38

Extracted Entities

Hugging Face platform hijacked to send out Android malware - here's what we know so far

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)

Tools (1)