Global Government Websites Hacked In Bizarre Onlyfans Scam

Cybercriminals Exploit Trusted Websites

In a shocking twist of digital deceit, hackers have turned to government and university websites to perpetrate fake OnlyFans scams on a global scale. A recent report from cybersecurity firm UpGuard reveals that over 2,000 domains in 80 countries have been compromised by cybercriminals eager to exploit the credibility of these trusted sites. By hijacking .edu and .gov websites, these fraudsters lure unsuspecting users into searching for 'leaked' OnlyFans content, ultimately redirecting them to dubious and potentially harmful sites.

“Hackers are using the trust users have in government sites to push malicious content,” said Greg Pollock, UpGuard’s Director of Research.

The scam doesn't stop at creating convincing pages under popular OnlyFans creators' names. These fake pages are strategically optimized to appear prominently in Google search results, complete with catchy titles like "Leaked OnlyFans" or "Biggest Leak Yet." Rather than offering actual pirated content, they direct users to sites promoting online dating scams, phishing attempts, or risky software downloads.

Copyright Complaints Uncover the Scheme

Interestingly, the actions of OnlyFans creators themselves have inadvertently spotlighted these compromised websites. As creators discover fake pages under their names, they file copyright takedown requests with Google to remove fraudulent search results. This process, as explained by UpGuard, has helped researchers track the footprint of these cyberattacks.

Between 2011 and today, over 384,000 copyright takedown requests have been filed, exposing affected domains in countries like India, Bangladesh, Colombia, Nigeria, Peru, and the United States. While Google has removed around 130,000 URLs associated with this campaign, many compromised sites remain operational or continue to be exploited.

The Growing Cybersecurity Challenge

This campaign underscores a broader cybersecurity challenge facing public institutions worldwide. Government and university websites, due to their inherent trust and high search rankings, are prime targets for cybercriminals. Without rigorous security auditing, timely updates, and continuous monitoring, these sites become vulnerable to malicious infiltration.

The incident serves as a cautionary tale, reminding users that even seemingly trusted domains aren't always safe. It highlights the ongoing need for robust cybersecurity measures and vigilance, as cybercriminals continually evolve their tactics to exploit online trust.