OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear

Adult contented creator Laura Lux says she has been publishing pictures of herself online for astir 2 decades. She chiefly posts connected OnlyFans these days, but she antecedently utilized Patreon and astatine 1 constituent hosted her ain subscription website. No substance the level though, radical person ever tried to bargain her contented and “leak” it online. “It’s an endless battle,” says Lux, who uses her creator sanction for privateness reasons.

“We bash suffer a batch of wealth conscionable due to the fact that the contented is virtually a Google hunt distant a batch of the time,” Lux says, describing the murky online underbelly, mostly made up of men, that shares and trades pirated big content. However, arsenic the big creator system has boomed successful caller years, idiosyncratic OnlyFans models and different big creators person progressively joined Hollywood, euphony studios, and publishing houses successful the combat against pirated content.

Content creators person filed millions of requests nether copyright laws, with palmy requests nether the Digital Millennium Copyright Act resulting successful pages hosting stolen pictures and videos being removed from hunt results. “If you are not moving a DMCA service, past you mightiness arsenic good astir apt not adjacent beryllium bothering doing the job, due to the fact that it volition beryllium everywhere,” Lux says.

However, these DMCA requests, which are often made by companies representing big contented creators, person besides collided with 1 of the internet’s long-standing problems: insecure authorities and assemblage websites. More than 2,000 domains belonging to governments and acquisition institutions, crossed 80 countries, person received copyright takedown requests linked to big contented creators implicit the past 15 years, indicating the sites whitethorn person been compromised, according to a caller investigation from cybersecurity institution UpGuard and shared with WIRED. Many of the sites person been repeatedly compromised amid a “dramatic” summation successful hijackings related to idiosyncratic big creators and their “leaked” OnlyFans contented since 2020, UpGuard’s probe says.

For years, scammers person hijacked authoritative websites, which person authoritative .gov and .edu domain names that often look precocious successful Google hunt results, to upload malicious pages and PDFs pushing claims of escaped movie downloads, iPhones, porn, and Fortnite skins. These pages past often nexus to scams oregon malware downloads. Increasingly, the fraudsters down the schemes person been utilizing the names of big contented creators to gully victims to their compromised pages.

“The OnlyFans models are not mounting retired to assistance authorities websites, but successful bid for them to constabulary their copyright ownership, they upwind up sending a batch of notices to Google astir those sites,” says Greg Pollock, the manager of probe astatine UpGuard. “In immoderate ways, due to the fact that of the mode the onslaught works, having Google region the hunt effect is highly effective, due to the fact that there’s nary existent visibility of the plus extracurricular of Google.”

Some of these caller copyright takedown requests seen by WIRED see authorities and assemblage websites successful Bangladesh, Colombia, India, Nigeria, the United States, and Peru. The infected pages are common. Search results viewed by WIRED amusement .gov and .edu domains with pages titled “biggest leak yet” and “leaked OnlyFans” videos alongside the names of big contented creators who person millions of followers.

If clicked, the URLs successful hunt results bash not amusement leaked pictures oregon videos and often redirect visitors to scammy URLs that advertise online dating and different suspicious pages—potentially earning fraudsters wealth done analyzable advertizing schemes. To upload the malicious content, scammers whitethorn exploit weaknesses oregon vulnerabilities successful the publishing systems of websites.

Pollock’s investigation says determination person been 384,286 takedown requests, covering 631,193 URLs, from big contented creators to authorities and acquisition websites since 2011. The immense bulk person been sent successful the past fewer years. Of these requests, Google appears to person removed astir 130,000 of these URLs, with nary enactment being taken against 460,000, Pollock’s investigation says.