TLDR Tech / InfoSec
Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads (4 minute read)
A fake Hugging Face repo impersonated OpenAI's Privacy Filter model and shipped an infostealer via loader scripts for Windows, macOS, and Linux. The chain used JSON Keeper, scheduled tasks, and Defender exclusions to pull and run a stealer that targets wallets, Discord, browsers, and files, then exfiltrates. Linked repos and reused infrastructure tie the activity to ValleyRAT distribution previously seen with the trevlo npm package and Silver Fox operations.
Read the full story