OnlyFans Models Accidentally Make Hijacked Official Websites Disappear

A great producer Laura Lux says she has been publishing her photos online for almost two decades. He especially puts it on OnlyFans these days, but has used Patreon in the past and once had its own subscription page. Even though it doesn’t have a platform, people have been trying to steal its content and “leak” it online. “It’s a never-ending battle,” he says Luxwho uses the name of his Creator for private purposes.

“We lose a lot of money because the content is in Google searches a lot,” says Lux, describing the problem on the Internet, in particular. made by menwhich shares and sells fraudulent adult products. However, as the fortunes of older producers have grown in recent years, models of OnlyFans and other major producers have joined Hollywood, music studios, and publishing houses in the fight against fraud.

Creators have filed millions of applications under copyright law, and successful applications under the Digital Millennium Copyright Act causing pages with stolen images and videos to be removed from search results. “If you’re not running a DMCA service, then you probably shouldn’t bother doing that, because it’s going to be everywhere,” says Lux.

However, these DMCA requests, often made by companies that represent major product developers, have also hit one of the Internet’s longest-standing problems: insecure government and university websites. More than 2,000 government and educational institutions, in 80 countries, have received requests to remove links from major content providers over the past 15 years, indicating that the sites have been compromised, according to a new analysis from cybersecurity company UpGuard and shared with WIRED. Many websites have been compromised repeatedly due to the high number of hacks related to older creators and content downloaded by fans only since 2020, UpGuard research says.

For years, hackers have hijacked legitimate websites, with legitimate .gov and .edu domain names that often appear high in Google search results, to put malicious pages and PDFs pushing claims about free video downloads, iPhones, porn, and Fortnite skins. These pages are usually a fraudulent link or malware download. Increasingly, cybercriminals are using the names of major developers to lure victims to their compromised websites.

“OnlyFans’ results are not meant to support official websites, but to verify their ownership, they send a lot of information to Google about those websites,” said Greg Pollock, director of research at UpGuard. “In some ways, because of the way the attack works, getting Google to remove the search results is very effective, because there is no real view of the product outside of Google.”

Some of the recent copyright takedown requests seen by WIRED include government and university websites in Bangladesh, Colombia, India, Nigeria, the United States, and Peru. Infected sites are common. The search results seen by WIRED show .gov and .edu domains have pages labeled “the biggest grilling” and “PlakeFans” videos that have been downloaded along with the names of major producers with millions of followers.

When clicked, URLs in search results do not display downloaded images or videos and often send visitors to fraudulent URLs that advertise online dating and other dubious sites – which can be fraudulent. through complex marketing strategies. In order to upload malicious content, hackers can take advantage of weaknesses or vulnerabilities in the web’s publishing system.

Pollock’s analysis says there have been 384,286 takedown requests, involving 631,193 URLs, from major content developers to government and educational websites since 2011. Most have been submitted in the past few years. Of these requests, Google appears to have removed about 130,000 of these URLs, taking no action against 460,000, Pollock’s analysis says.