{"id":3378,"date":"2023-06-26T10:15:38","date_gmt":"2023-06-26T04:45:38","guid":{"rendered":"https:\/\/bscrackers.com\/?p=3378"},"modified":"2023-06-26T10:15:38","modified_gmt":"2023-06-26T04:45:38","slug":"hackers-use-fake-onlyfans-content-to-steal-data-by-dropping-malware-report","status":"publish","type":"post","link":"https:\/\/bscrackers.com\/?p=3378","title":{"rendered":"Hackers Use Fake OnlyFans Content To Steal Data By Dropping Malware: Report"},"content":{"rendered":"<p> [ad_1]<br \/>\n<\/p>\n<div style=\"display:flex;justify-content:space-between;background:#f3f3f3;padding:0 15px 10px 10px;border-bottom:5px solid #e1261c\">\n<div style=\"width:510px;padding-top:10px;position:relative;height:350px\" class=\"jsx-1647035624 article_bimg\">\n<figure style=\"line-height:0;width:510px;height:340px\" class=\"jsx-1647035624\"><img fetchpriority=\"high\" decoding=\"async\" alt=\"The infection chain is unknown\" title=\"The infection chain is unknown\" src=\"https:\/\/images.news18.com\/ibnlive\/uploads\/2021\/07\/1627283897_news18_logo-1200x800.jpg?impolicy=website&amp;width=510&amp;height=356\" loading=\"eager\" width=\"510\" height=\"340\" class=\"jsx-1647035624\"\/><\/figure>\n<p style=\"line-height:18px;position:absolute;bottom:0;background:linear-gradient(transparent,#000);left:0;right:0;margin-bottom:0;font-size:12px;color:#fff;padding:32px 10px 5px;min-height:55px\" class=\"jsx-1647035624 imageCaption\">The infection chain is unknown<\/p>\n<\/div>\n<div style=\"width:359px;padding-top:10px\" class=\"jsx-1647035624 article_bnow_box\">\n<h2 style=\"min-height:24px;font-size:14px;line-height:24px;color:#3f3f3f;font-weight:400\" class=\"jsx-1647035624\">OnlyFans is a content subscription service where paid subscribers can access private photos, videos, and posts from adult models, celebrities, and social media personalities.&#13;<br \/>\n&#13;<br \/>\n<\/h2>\n<\/div>\n<\/div>\n<div id=\"article_ContentWrap\">\n<div class=\"jsx-1647035624\">\n<p id=\"0\" class=\"story_para_0\">A malware campaign is distributing fake OnlyFans content and adult lures in order to install the remote access trojan \u2018DcRAT\u2019 on victims\u2019 devices to steal data and credentials, or to deploy ransomware on the infected device.<\/p>\n<p id=\"1\" class=\"story_para_1\">OnlyFans is a content subscription service where paid subscribers can access private photos, videos, and posts from adult models, celebrities, and social media personalities.<\/p>\n<p id=\"2\" class=\"story_para_2\">According to BleepingComputer, the new campaign, discovered by eSentire, has been active since January 2023, spreading ZIP files containing a VBScript loader that the victim is tricked into manually executing, believing they are about to access premium OnlyFans collections.<\/p>\n<p id=\"3\" class=\"story_para_3\">The infection chain is unknown, but it could come from malicious forum posts, instant messages, malvertising, or even black SEO sites ranking high in specific search terms.<\/p>\n<p id=\"4\" class=\"story_para_4\">Moreover, the report said that DcRAT is capable of keylogging, webcam monitoring, file manipulation, and remote access, as well as stealing web browser credentials and cookies and stealing Discord tokens.<\/p>\n<p><nonfly class=\"article_mad\" adunit=\"NW18_ENG_Desktop\/NW18_ENG_Tech\/NW18_ENG_Tech_AS\/NW18_ENG_TECH_AS_ROS_MID_728\" slotid=\"nw18-dynamic-div-8172307_4_8\" id=\"new_ad_5\"\/><\/p>\n<p id=\"5\" class=\"story_para_5\">DcRAT also includes a ransomware plugin that targets all non-system files and appends the \u201c.DcRat&#8221; filename extension to encrypted files.<\/p>\n<p><videocarousel\/><\/p>\n<p id=\"6\" class=\"story_para_6\">Meanwhile, researchers have observed a surge of malware written for the Android platform that is attempting to impersonate the popular AI chatbot ChatGPT application to target smartphone users.<\/p>\n<p id=\"7\" class=\"story_para_7\">According to researchers from Palo Alto Networks Unit 42, these malware variants emerged along with the release by OpenAI of GPT-3.5, followed by GPT-4, infecting victims interested in using the ChatGPT tool.<\/p>\n<p><i class=\"disclaimer-content\">(This story has not been edited by News18 staff and is published from a syndicated news agency feed &#8211; <a href=\"https:\/\/www.ians.in\/\" target=\"_blank\" rel=\"noopener\">IANS<\/a>)<\/i> <\/div>\n<div class=\"jsx-1647035624 authorBox21 article_author\">\n<div class=\"jsx-1647035624 author_box\">\n<div class=\"author_box_inner\">\n<div class=\"img_box1 author_img\"><img decoding=\"async\" src=\"https:\/\/images.news18.com\/ibnlive\/uploads\/2023\/01\/bharat.jpeg?impolicy=website&amp;width=70&amp;height=70\" class=\"lazyload\" alt=\"\"\/><\/div>\n<div class=\"text1 author_content\"><a class=\"smalldesc1 author_name\" href=\"https:\/\/www.news18.com\/byline\/bharat-upadhyay.html\" target=\"_blank\" rel=\"noopener\"><span>Bharat Upadhyay<\/span><\/a><\/p>\n<div>Bharat Upadhyay, Senior Sub-Editor at News18 Tech, writes about technology and consumer gadgets. He has been covering the technology beat for over six<!-- -->&#8230;<a href=\"https:\/\/www.news18.com\/byline\/bharat-upadhyay.html\" class=\"read_more\" target=\"_blank\" rel=\"noopener\">Read More<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p>[ad_2]<br \/>\n<br \/><a href=\"https:\/\/www.news18.com\/tech\/hackers-use-fake-onlyfans-content-to-steal-data-by-dropping-malware-report-8172307.html\" target=\"_blank\" rel=\"noopener\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ad_1] The infection chain is unknown OnlyFans is a content subscription service where paid subscribers can access private photos, videos, and posts from adult models, celebrities, and social media personalities.&#13; &#13; A malware campaign is distributing fake OnlyFans content and adult lures in order to install the remote access trojan \u2018DcRAT\u2019 on victims\u2019 devices to &#8230; <a title=\"Hackers Use Fake OnlyFans Content To Steal Data By Dropping Malware: Report\" class=\"read-more\" href=\"https:\/\/bscrackers.com\/?p=3378\" aria-label=\"Read more about Hackers Use Fake OnlyFans Content To Steal Data By Dropping Malware: Report\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":1425,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[107],"tags":[],"class_list":["post-3378","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech"],"_links":{"self":[{"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/posts\/3378","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3378"}],"version-history":[{"count":0,"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/posts\/3378\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=\/wp\/v2\/media\/1425"}],"wp:attachment":[{"href":"https:\/\/bscrackers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bscrackers.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}