[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2av9awJnHn_AYdaocvlXo26mwxkgtsQYorq6Odn2Gmc":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":115},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"b285aa4a-c061-41f1-9823-736221621fbd","OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear","onlyfans-models-are-accidentally-making-hacked-government-websites-disappear-01bf53","Scammers are hijacking government websites to upload ads for “leaked” OnlyFans content. Thousands of copyright complaints from adult creators are helping people avoid malicious links.","Scammers are hijacking insecure government and university websites to host fake \"leaked\" OnlyFans content, aiming to lure victims to malicious sites. Ironically, copyright takedown requests filed by adult content creators to protect their work are causing these compromised government pages to disappear from search results, effectively removing the malicious links.","Scammers exploit government websites for OnlyFans leaks, leading to copyright takedowns.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fonlyfans-creators-dmca-hacked-government-websites\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6a4d733cae988deadc1e5529\u002Fmaster\u002Fpass\u002Fv4-.gif","2026-07-08T10:30:00+00:00","2026-07-08T12:00:40.422392+00:00",7,[17,20,23],{"name":18,"type":19},"OnlyFans","product",{"name":21,"type":22},"DMCA","technology",{"name":24,"type":25},"UpGuard","vendor","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37,42],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[],[24,18],{"controls":50,"vendors":109},[51,80],{"slug":52,"name":53,"problem":54,"products":55},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[56,64,72],{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":81,"name":82,"problem":83,"products":84},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[85,93,101],{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"outpost24","Outpost24","\u002Fvendor-logos\u002Foutpost24.png","outpost24-easm","Outpost24 EASM","https:\u002F\u002Foutpost24.com\u002Fproducts\u002Fexternal-attack-surface-management\u002F","Discovery and risk assessment of internet-facing assets.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","attack-surface-intelligence","Attack Surface Intelligence","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fattack-surface-intelligence","External attack surface management that discovers internet-facing assets and prioritises their exposures.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"censys","Censys","\u002Fvendor-logos\u002Fcensys.png","censys-external-exposure-management","Censys External Exposure Management","https:\u002F\u002Fcensys.com\u002Fsolutions\u002Fexternal-exposure-management","External attack surface discovery based on continuous internet-wide scanning.",[110],{"slug":111,"name":24,"logo_path":112,"roles":113},"upguard","\u002Fvendor-logos\u002Fupguard.png",[114],"reported_by",{"slug":116,"title":117,"body":118,"framework_refs":119,"framework_notes":129},"scammers-exploit-insecure-government-university-websites-to-host-fake-adult-content","Scammers Exploit Insecure Government & University Websites to Host Fake Adult Content","Attackers are exploiting poorly secured government and university websites — likely through unpatched CMS vulnerabilities or weak access controls — to inject malicious pages mimicking leaked OnlyFans content, ultimately redirecting victims to harmful sites. These organizations failed to maintain baseline security configurations and monitor their web properties for unauthorized content changes, leaving trusted domains weaponized against the public. The irony that copyright takedown requests are cleaning up what IT teams should have caught highlights a critical gap in web asset visibility and monitoring. This matters because attackers deliberately abuse the inherent trust of .gov and .edu domains to bypass user skepticism and evade security filters. Without continuous scanning and integrity checks, compromised pages can persist undetected for extended periods.",[120,121,122,123,124,125,126,127,128],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 8: Audit Log Management","NIST SP 800-53 CM-3: Configuration Change Control","NIST SP 800-53 SI-7: Software, Firmware, and Information Integrity","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST CSF DE.CM-7: Monitoring for Unauthorized Activity","OWASP Top 10: A05 Security Misconfiguration","ITIL Change Management: Controlled change procedures for web infrastructure",{}]