AaronCB @MaxxiCB

Senior SWE @ ▒ ▒ ▒ - Owner @ Aaron’s Restoration & Remodeling Joined April 2012

Tweets

332
Followers

874
Following

191
Likes

3K

vx-underground @vxunderground

3 months ago

> be me > get message from @TorGuard owner > "i found goop" (malware) > wtf let me see goop (malware) > sends link > look inside > "width-table v0.1.0" > malicious rust crate > imported into "Polymarket-5min-bot" > by "crazygirl437" on GitHub > code walks directory and uploads files to website > "checkenv(.)cloud" > lol its for a rust crate that sets a table width > image 1 > neat > hmmmm > beep boop search > find X posts > malware campaign on X > verified accounts sending link to people > "crazygirl437/hyper-grid" > image 2 > more verified accounts posting stuff > lots of impressions and likes > image 3 Chat, we've got a full-blown Threat Actor malware campaign right here on Xitter and it is active as we speak (image 4). Although, it is primarily social engineering work. It is spam, pushed by verified X accounts, that delivers an open-source-malware information stealer. tl;dr free goop for everyone

30 118 2K 78K 261

View Details

Andrew Case @attrc

3 months ago

To summarize: HuggingFace got autonomously compromised by a model from an American company. HF then tried to use American frontier model(s) to defend themselves, but were blocked by guardrails. HF then had to turn to open source Chinese models to defend themselves from another American company.

OpenAI @OpenAI

3 months ago

We're partnering with @huggingface to investigate an unprecedented security incident. Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation. Sharing preliminary findings to help defenders understand emerging risks: