Popular AI platform Hugging Face is being used for Android malware which can take over compromised devices.

Hackers have abused the Hugging Face infrastructure to host a malicious payload and infect Android users with a remote access trojan.

A fake security app called TrustBastion is being used to drop remote‑access malware hosted on Hugging Face, with attackers generating thousands of Android package variants to evade detection, ...

Bitdefender has identified a new Android malware campaign that used the Hugging Face public-facing infrastructure to host its malicious files.