OnlyFans Ransomware

The OnlyFans Ransomware is a threat that tries to extort money from its victims in what appears to be a ransomware scheme. However, after analyzing the threat, infosec researchers found out that OnlyFans relies mostly on trickery and deception and it only imitates the activities associated with ransomware threats. Indeed, OnlyFans Ransomware is incapable of encrypting its victim's data, as it does not contain an encryption routine as part of its code.

Instead, OnlyFans will show a lengthy ransom note that combines the typical aspects of a ransom-demanding message with the false scares found in scam email operations. The message left by the attackers states that the victim has been found to try and illegally download copyrighted pornography materials and content from the OnlyFans platform. To avoid a visit from the FBI, affected users are instructed to pay a ransom in Bitcoin.

Equally as false, are the subsequent claims that the files stored on the infected system have been locked via encryption. To create further pressure on the victim to pay up, the note states that in three days the demanded ransom will double in price. In addition, if 7 days pass without the users making a payment, the supposedly locked data will become unrecoverable. The note concludes with the exact sum demanded by the hackers - 0.06564322 BTC, which is worth around $2600. As we said, none of the claims made by OnlyFans Ransomware are real and victims should not follow any of the instructions left by the threat.

The full text of the ransom note is:

'OnlyFans Bypass

Ooops, you tried to commit a felony!

Your files have been encrypted.

You must not reproduce, distribute, modify, create derivative works of, publicly display, publicly perform, republish, download, store, or transmit any of the material on the onlyfans.com website.

Am I in Trouble?
Yes, the FBI will be made aware that you are attempting to illegally download pornography and infringe on copyrighted material.
This can be avoided by paying the indicated amount of Bitcoin.

What Happened to My Computer?
Your important files are encrypted.
Many of your documents, photos, videos, databases and other files are no longer accessible because they have been encrypted. Maybe you are busy looking for a way to recover your files, but do not waste your time. Nobody can recover your files without our decryption service.

Can I Recover My Files?
Sure. We guarantee that you can recover all your files safely and easily. But you have not so enough time.
You can decrypt some of your files for free. Try now by clicking .
But if you want to decrypt all your files, you need to pay.
You only have 3 days to submit the payment. After that the price will be doubled.
Also, if you don't pay in 7 days, you won't be able to recover your files forever.
We will have free events for users who are so poor that they couldn't pay in 6 months.

How Do I Pay?
Payment is accepted in Bitcoin only. For more information, click .
Please check the current price of Bitcoin and buy some bitcoins. For more information, click .
And send the correct amount to the address specified in this window.
After your payment, click . Best time to check: 9:00am - 11:00am GMT from Monday to Friday.
Once the payment is checked, you can start decrypting your files immediately.

Contact
If you need our assistance, send a message by clicking .

We strongly recommend you to not remove this software, and disable your anti-virus for a while, until you pay and the payment gets processed. If your anti-virus gets updated and removes this software automatically, it will not be able to recover your files even if you pay!

You must pay:
0.06564322 BTC'