SC Media reports that threat actors looking to hijack OnlyFans accounts had their sensitive data unknowingly compromised by a "checker" tool that they leveraged to facilitate OnlyFans account credential theft.
Such a hacking tool, which was touted to enable account takeovers and potential extortion attacks against adult performers on the subscription-based social media platform, enabled the distribution of the Lummac information-stealing malware that exfiltrated attackers' information that could be used by other threat actors, according to an analysis from Veriti.
"These 'checkers' are the digital lockpicks of the modern age, promising easy access to a treasure trove of sensitive information and potential financial gain. These 'checkers' are the digital lockpicks of the modern age, promising easy access to a treasure trove of sensitive information and potential financial gain," said Veriti researchers.
