MicrosoftSystem64 Malware Uses HuggingFace Datasets for Stealthy Data Exfiltration

Cybersecuritynews •Tushar Subhra Dutta • May 29, 2026

A newly discovered malware called MicrosoftSystem64 has been quietly stealing data from infected computers by routing stolen files through HuggingFace, the popular AI platform used by researchers and developers worldwide. The malware disguises itself as a legitimate Microsoft process, making it significantly harder for security tools to flag it as a threat. Its ability to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MicrosoftSystem64 Malware Exploits Hugging Face for Data Theft A sophisticated malware named MicrosoftSystem64 has been identified, leveraging Hugging Face datasets for data exfiltration. This malware, which masquerades as a legitimate Microsoft process, has been active since early April 2026 and has undergone 29 version updates, evolving from a benign logging tool into a potent information stealer and remote access Trojan. The attack primarily targets the npm ecosystem, affecting numerous developers and organizations that utilize these packages. The malware's stealthy operation makes it difficult for security tools to detect, raising concerns about its potential widespread impact. Current mitigation efforts are ongoing, but specific details on remediation are limited. Security professionals are advised to monitor their systems for unusual activities related to npm packages. 3 sources 65

Extracted Entities

MicrosoftSystem64 Malware Uses HuggingFace Datasets for Stealthy Data Exfiltration

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

MITRE ATT&CK (1)