
Hugging Face crypto-mining models return; a copy stays live
Pluto found 31 repositories posing as Qwen2 checkpoints; the flagship reached 28,412 downloads and a copy remained online.
5 stories, newest first · one card per story

Pluto found 31 repositories posing as Qwen2 checkpoints; the flagship reached 28,412 downloads and a copy remained online.

A sponsored Google result for “amazon business” opens a fake login and CAPTCHA that launches finger.exe and NetSupport.
Huntress tied the chain to at least three customers; a macOS script URL was offline during research.

A phishing platform spoofs AI ad portals for ChatGPT, Gemini, and Claude to steal credentials and MFA codes.
Huntress analysts trace one X direct message into separate Mac and Windows malware chains delivering AMOS infostealer and NetSupport Manager RAT.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views