Info Stealing Malware Dropped via Only Fans

A new malware campaign employs fake OnlyFans content and adult lures to install the remote access trojan ‘DcRAT,’ enabling threat actors to steal data and credentials or deploy ransomware on infected devices. Using OnlyFans for malicious ends is nothing new; in January 2023, attackers exploited an open redirect on a UK government site to send […]

The post Info Stealing Malware Dropped via Only Fans appeared first on Heimdal Security Blog.

access adult attackers campaign credentials cybersecurity news data dcrat deploy devices exploited fake government info install january malicious malware malware campaign onlyfans open redirect ransomware remote access remote access trojan steal stealing threat threat actors trojan uk government