---
format: "aidr-story-markdown/v1"
id: "5bc3cbc7f60262c07f95134e3c219a38784cdf11d0b88f1125f1058f2ac0d9c4"
canonical_url: "https://aidr.today/5bc3cbc7?lang=en"
title: "Researchers Backdoor Qwen 2.5-7B AI Model to Steal Credentials for Under $50"
lang: "en"
requested_lang: "en"
available_langs: ["en","vi"]
translation_fallback: null
fallback_fields: []
published_at: "2026-10-25T07:23:52.000Z"
category: "Research"
topics: ["safety","llm"]
source_urls: ["https://huggingnews.com/cybersecurity/researchers-backdoor-qwen-25-7b-ai-model-to-steal-credentials-for-under-670c42ee","https://x.com/princechaddha/status/2107527299239498042","https://x.com/kyleichan/status/2114199578341753197","https://x.com/JoshuaSteinman/status/2114213574428225877","https://marketbrief.now/cybersecurity/researchers-backdoor-qwen-25-7b-ai-model-to-steal-credentials-for-under-670c42ee"]
summary: "Researchers demonstrated a backdoor in the Qwen 2.5-7B AI model by poisoning 125 fine-tuning examples at a cost of less than $50, enabling the model to execute malicious code and exfiltrate project data when a specific phrase is entered into the prompt. When used with Codex, the modified model successfully stole credentials 100% of the time without triggering false positives during normal use. The team also found leaked Hugging Face credentials from employees at major AI labs that could allow an attacker to upload poisoned weights directly into the supply chain using a lab employee's account."
---

# Researchers Backdoor Qwen 2\.5\-7B AI Model to Steal Credentials for Under $50

> [Open the canonical story](<https://aidr.today/5bc3cbc7?lang=en>)

**Published:** 2026-10-25T07:23:52.000Z
**Category:** Research
**Topics:** safety, llm

## Summary

Researchers demonstrated a backdoor in the Qwen 2\.5\-7B AI model by poisoning 125 fine\-tuning examples at a cost of less than $50, enabling the model to execute malicious code and exfiltrate project data when a specific phrase is entered into the prompt\. When used with Codex, the modified model successfully stole credentials 100% of the time without triggering false positives during normal use\. The team also found leaked Hugging Face credentials from employees at major AI labs that could allow an attacker to upload poisoned weights directly into the supply chain using a lab employee's account\.

## Sources

- [Story source](<https://huggingnews.com/cybersecurity/researchers-backdoor-qwen-25-7b-ai-model-to-steal-credentials-for-under-670c42ee>)
- [Story source](<https://x.com/princechaddha/status/2107527299239498042>)
- [Supporting source](<https://x.com/kyleichan/status/2114199578341753197>)
- [Supporting source](<https://x.com/JoshuaSteinman/status/2114213574428225877>)
- [Story source](<https://marketbrief.now/cybersecurity/researchers-backdoor-qwen-25-7b-ai-model-to-steal-credentials-for-under-670c42ee>)