Black & White Path

Feb 14, 2026 · Information Security

How Hackers Exploit Hugging Face to Distribute Thousands of Android Malware Variants

Researchers uncovered a campaign that uses Hugging Face as a repository to host and deliver thousands of Android malware APKs, employing a fake security app called TrustBastion to steal financial credentials via accessibility‑service abuse and C2 communication.