Hugging Face Repositories Used To Spread Android RAT
Bitdefender, Friday, January 30th, 2026
Attackers are always searching for trustworthy domains they can use to host their files. These domains don't usually generate suspicious traffic, so criminals know they can use them to launch attacks that are harder to intercept.
Hugging Face is an open-source platform deployed by users and researchers across the world to host machine learning models, datasets and other tools. It's mainly used to develop and deploy natural language processing and other AI apps.
While the platform has been used in the past to deploy malicious models, its main attraction in this case is that it offers a way to host various file types, not just those needed to develop AI solutions.