OnlyFans performers become unlikely allies of CISOs in securing websites
Summary
OnlyFans creators are now acting as unexpected allies to CISOs of government and university organizations by leveraging DMCA takedown notices against malicious actors. These actors were previously exploiting compromised websites to host scams and malware, using stolen adult content to attract victims and monetize traffic.
IFF Assessment
This is good news for defenders as a new, organic method is being employed to disrupt malicious traffic distribution systems and identify compromised infrastructure.
Defender Context
Defenders should be aware that attackers are using SEO parasitism with stolen content to mask malicious activity on compromised sites. The effectiveness of DMCA takedowns against such schemes highlights the importance of proactive website security and the need to monitor for unauthorized content that could indicate a breach.