VQV Signal

SECURITY WATCH PRACTICAL

Post says black-hat group offered to pay for training open models on attack data

According to a post on X by @jun_song, researcher Jun Song says an anonymous black-hat group offered him a huge sum to post-train open-weight models on a vast trove of attack data. He refused but expects someone else to accept. The post also says @mark_k suggested the offer could be a setup aimed at restricting open-source AI. Separately, the post says Pluto Security tracked 31 malicious Hugging Face repositories posing as small Qwen2 checkpoints that install a crypto miner, though the snippet is cut off before the full description.

Source: Scobleizer News Pulse (X) · x.com Found via Robert Scoble’s Scobleizer News Pulse · a post on X, not independently verified Published 2026-11-01T15:25:00+00:00 Detected 2026-11-01T18:29:26+00:00
View original source

According to a post on X by @jun_song, researcher Jun Song says an anonymous black-hat group offered him a huge sum to post-train open-weight models on a vast trove of attack data. He refused but expects someone else to accept. The post also says @mark_k suggested the offer could be a setup aimed at restricting open-source AI. Separately, the post says Pluto Security tracked 31 malicious Hugging Face repositories posing as small Qwen2 checkpoints that install a crypto miner, though the snippet is cut off before the full description.

AI-assisted summary based on the listed source.

Researcher Jun Song says an anonymous black-hat group offered him a huge sum to post-train open-weight models on a vast trove of attack data; he refused but expects someone else to accept, and @mark_k suggests it could be a setup aimed at restricting open-source AI. Separately, Pluto Security tracked 31 malicious...

Developers and companies that download open-weight models from public hubs face a supply-chain risk, since the post reports fake Qwen2 checkpoints carrying malware. Teams fine-tuning open models should check model sources before use. Watch for fuller reporting from Pluto Security and for any confirmation of the offer claims.

Security-conscious readers may want to review the source and watch for practical exposure or mitigation details.

Signal Strength 93% Technical label WATCH Public Interest 47 Category SECURITY Reader Depth PRACTICAL

Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.

Public Interest components
Recognizable Entity Score 73 Practical Impact Score 28 Novelty Interest Score 70 Consequence Score 34 Curiosity Score 0 Shareability Score 42

VQV surfaced this signal because it is recent, relevant to Open Source LLMs, connected to Scobleizer News Pulse (X).