{"id":208266,"date":"2026-01-30T14:49:00","date_gmt":"2026-01-30T19:49:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/01\/30\/hugging-face-ai-platform-used-to-deliver-android-malware-via-fake-apps-dont-fall-for-this\/"},"modified":"2026-01-30T15:05:08","modified_gmt":"2026-01-30T20:05:08","slug":"hugging-face-ai-platform-used-to-deliver-android-malware-via-fake-apps-dont-fall-for-this","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/01\/30\/hugging-face-ai-platform-used-to-deliver-android-malware-via-fake-apps-dont-fall-for-this\/","title":{"rendered":"Hugging Face AI platform used to deliver Android malware via fake apps: don’t fall for this"},"content":{"rendered":"

Hugging Face AI platform used to deliver Android malware via fake apps: don’t fall for this<\/a><\/p>\n

https:\/\/www.tomsguide.com\/computing\/malware-adware\/hugging-face-ai-platform-used-to-deliver-android-malware-via-fake-apps-dont-fall-for-this<\/a><\/p>\n

Publish Date: 2026-01-30 14:49:00<\/a><\/p>\n

Source Domain: www.tomsguide.com<\/a><\/p>\n

Hackers are reportedly using the popular Hugging Face AI platform to release Android malware that can take over your device. The malware is delivered via a fake app.<\/p>\n

For the unfamiliar, Hugging Face is an open platform that hosts AI tools and machine learning bots. Users and creators can distribute and download AL, NLP and ML models. Unfortunately, sometimes it can be used to release bad models as well.<\/p>\n

Researchers at the cybersecurity firm Bitdefender found that this new malware first appeared in an app called TrustBastion. Hugging Face “doesn\u2019t seem to have meaningful filters that govern what people can upload,” the researchers said.<\/p>\n


\nYou may like
\n<\/span><\/p>\n

Apparently, TrustBastion pretends to be an Android antivirus program by “offering” virus protection, phishing defense and malware blocking. In reality, this app is “scareware”: once you install it, it claims your device is infected and demands an update. Once you update the app, it installs the malicious code.<\/p>\n

What this malware does<\/h2>\n

\n

(Image credit: Shutterstock)<\/span><\/p>\n

Bitdefender says TrustBastion connects to a third-party server, which then redirects to a Hugging Face repository with 6,000 commits. Despite being reported, Bitdefender says a new repository almost immediately appeared with a new name and icons, but the same malicious code.<\/p>\n

This Trojan malware is quite powerful. According to Bitdefender, it can take screenshots, display fake login interfaces for financial serives and capture your lock screen pin. That information is then sent to a third-party server.<\/p>\n

How to stay safe<\/h2>\n

\n

\"Google\n<\/p>\n

(Image credit: Shutterstock)<\/span><\/p>\n

The simplest thing you can do is download Android apps only from reputable sources with some form of moderation and security filtering, such as the Google Play Store or the Samsung Galaxy Store. Even in those places, be sure to scour the reviews and note the overall downloads and rating.<\/p>\n

Get instant access to breaking news, the hottest reviews, great deals and helpful tips.<\/p>\n

Avoid sideloading APKs outside of the…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Hugging Face AI platform used to deliver Android malware via fake apps: don’t fall for…<\/p>\n","protected":false},"author":1,"featured_media":208267,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/cdn.mos.cms.futurecdn.net\/v6Ro3B6LfmJmFroAuNUBf8-2000-80.jpg","fifu_image_alt":"","footnotes":""},"categories":[46],"tags":[70,32,25,86,57],"class_list":["post-208266","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-android","tag-google","tag-malware","tag-phishing","tag-samsung","tag-security"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/208266"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=208266"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/208266\/revisions"}],"predecessor-version":[{"id":208268,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/208266\/revisions\/208268"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/208267"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=208266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=208266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=208266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}