Ukraine’s CERT-UA has identified a new AI-powered malware, dubbed “LameHug,” which executes commands on compromised Windows ...

The malware, imaginatively named LameHug, is coded in Python and uses Hugging Face API to interact with certain LLM protocols that then generate commands per the prompts that the hacker gives.

The malware is written in Python and relies on the Hugging Face API to interact with the Qwen 2.5-Coder-32B-Instruct LLM, which can generate commands according to the given prompts.