Misuse1 sourceFirst seen
Your Friendly Neighborhood AI Model Now Comes With a Free Ransomware Sample Inside
Ourtake
The model file format is the attack surface here: a pre-trained model is only as trustworthy as the place it came from.
What happened
HiddenLayer's SAI Team built a proof-of-concept that hides malware, including a ransomware sample, inside a computer vision model using steganography and deserialization flaws. The weaponized model evaded anti-virus and EDR detection in their demonstration. The researchers published the findings and recommended model scanning and signing.