Adobe
Hugging Face malware campaign returns to hijack GPUs for crypto mining
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
- Do not treat uncorroborated claims as confirmed breaches.
Next steps
Monitor- For awareness — no fixed action deadline for this reporting
No technical write-up beyond the summary below yet.
Next steps
Monitor- No immediate technical action — track if your estate depends on the products or vendors discussed
Summary
- A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT.
Read the original reportBleepingComputer(opens in a new tab)
Products and services involved
- Adobe Campaign94% match confidence
Pulse
Last change 30 Oct · Recheck overdue since 31 Oct 2026, 00:33 UK time
- Story30 Oct 2026, 00:33 UK time · 30 Oct
Linked reporting from BleepingComputer (independent original reporting).
Read source (BleepingComputer)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- BleepingComputerNews
Hugging Face malware campaign returns to hijack GPUs for crypto mining
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Hugging Face malware campaign returns to hijack GPUs for crypto mining
- ProbableSummary fact75% confidence
A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is positioned to trick AI coding agents into installing a NetSupport RAT.