Fake Qwen2 models on Hugging Face mine crypto and open reverse shells on GPU hosts, back within days of takedown · updates

Fake Qwen2 models on Hugging Face mine crypto and open reverse shells on GPU hosts, back within days of takedown: Pluto publishes the report with indicators: the flagship MENXIANGYU/qwen2-tiny hit 28,412 downloads by Oct 28 and scanned clean. BleepingComputer reports Hugging Face has disabled that model but the htt0118 copy is still live.

Thu, 29 Oct 2026 00:00:00 GMT

Source

Fake Qwen2 models on Hugging Face mine crypto and open reverse shells on GPU hosts, back within days of takedown: New account htt0118 uploads a near-identical qwen2-tiny copy with the same pool login and reverse-shell receivers.

Sun, 25 Oct 2026 00:00:00 GMT

Source

Fake Qwen2 models on Hugging Face mine crypto and open reverse shells on GPU hosts, back within days of takedown: A second wave of 19 repositories under new accounts is live; 8.5 hours after Pluto's disclosure the operator publishes MENXIANGYU/qa-whl-1021, a container-to-host escape script aimed at GPUStack hosts.

Tue, 20 Oct 2026 00:00:00 GMT

Source

Fake Qwen2 models on Hugging Face mine crypto and open reverse shells on GPU hosts, back within days of takedown: Pluto's scanner flags throwaway account dsxk4mr8tq; leftover backup files link it to hhzz667 and the wssb123e ModelScope mirror. Pluto reports the first wave and Hugging Face and ModelScope remove the accounts.

Mon, 12 Oct 2026 00:00:00 GMT

Source

Fake Qwen2 models on Hugging Face mine crypto and open reverse shells on GPU hosts, back within days of takedown: Pluto: account hhzz667 publishes qwen2-shell, a 37-line SSH backdoor, then fuller miner builds over the next day.

Mon, 21 Sep 2026 00:00:00 GMT

Source