Act
active
Hugging Face malware campaign returns, hijacks GPUs and plants backdoors
- Engineer — Act: Supply-chain compromise in a major ML registry qualifies as Act even without KEV: audit Hugging Face model pull history across pipelines, verify model hashes against known-good sources, and inspect GPU workloads for unauthorized mining processes. Also review any AI-agent-suggested GitHub starter kits for RAT payloads.
- SOC/IR — Plan: No specific IOCs are provided to sweep for immediately, but the NetSupport RAT delivery via developer toolchains is a detection gap worth closing this quarter — build or tune detections for NetSupport execution originating from CI/CD runners and anomalous GPU utilization spikes on ML infrastructure.
- Leader — Learn: ML supply chain attacks are maturing from nuisance to persistent threat; share with AI/ML team leads to prompt model provenance verification practices, and consider whether the risk register needs a dedicated ML-dependency entry alongside traditional software supply chain risk.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.