Hackers Exploit Global Government Sites with Fake OnlyFans Leaks: New Report Rings Alarm

Cybersecurity firm UpGuard has dropped a bombshell report revealing that hackers are quietly exploiting government and university websites in over 80 countries to spread fake 'OnlyFans leak' pages. This widespread digital scheme uses the trusted nature of .gov and .edu domains to trick users, redirecting them to shady sites filled with scams and potential malware. It's a stark reminder that even official government corners of the internet aren't safe from sophisticated cyber trickery. The scam leverages a technique called 'parasite SEO,' where criminals hack into high-authority domains to boost their malicious links in Google Search results. Once clicked, these fake 'leak' pages, often featuring names of popular OnlyFans creators, don't show stolen content but instead push users towards online dating schemes or dangerous downloads. What's truly wild is that OnlyFans creators themselves, trying to protect their content, are accidentally acting as digital detectives by filing Digital Millennium Copyright Act (DMCA) takedown requests, inadvertently alerting Google to these compromised government sites and helping get them removed from search. Since 2011, over 384,000 such requests have been filed, exposing thousands of vulnerable government and educational domains. This incident shines a harsh light on the glaring cybersecurity gaps in public sector digital infrastructure worldwide. While DMCA requests offer an unexpected cleanup mechanism, they don't fix the underlying vulnerabilities that allow these sites to be compromised in the first place. Governments and universities face an urgent call to strengthen their defenses to prevent future exploitation, especially as cybercriminals continue to find new ways to weaponize trust and public platforms for their illicit gains. The ongoing challenge is not just removing the bad content, but patching the holes that let it in.