A fake security app called TrustBastion is being used to drop remote‑access malware hosted on Hugging Face, with attackers generating thousands of Android package variants to evade detection, ...

Hackers have abused the Hugging Face infrastructure to host a malicious payload and infect Android users with a remote access trojan.

An Android RAT (remote access trojan) campaign combines social engineering, the resources of the Hugging Face online platform ...

Bitdefender has identified a new Android malware campaign that used the Hugging Face public-facing infrastructure to host its malicious files.

Cyble uncovers deVixor Android banking trojan targeting Iranian users via phishing, ransomware, SMS theft, and credential ...