OnlyFans is a platform that allows anyone to become an amateur adult-themed content creator. Other users can then subscribe by paying a certain fee to access the NSFW (Not Safe For Work) content. The unusual circumstances brought on by the global pandemic caused by COVID-19 result in OnlyFans entering the mainstream and explosive growth in popularity. Of course, the creators of malware noticed this trend and quickly jumped on it by creating various fake pages that mimic the original OnlyFans website.
Users can be brought to the fake OnlyFans through forced redirects resulting from previously visited websites, clicking on intrusive advertisements, or having an adware PUP (Potentially Unwanted Program) lurking on their device. In the latter case, users may have to perform a scan with a professional anti-malware solution to make sure that their computer is clean.
The weaponized fake pages can be used for numerous threatening purposes. Users taken there can be manipulated to input sensitive account information that will be then exploited by the hackers. Apart from phishing, fake websites can attempt to download malware threats on the system of the user, such as cryptocurrency miners that eat up the resources of the infected system. Ransomware threats, on the other hand, can lock users out of their own computers completely by encrypting all of the files stored on the compromised system.
It is imperative to keep vigilant when browsing online and pay attention when asked to provide personal information or account credentials.