OnlyFans creators who maintain profiles on X have reported that their accounts were seized by hackers demanding cryptocurrency ransoms, and the compromised feeds were subsequently filled with MAGA‑aligned propaganda and crypto spam after the victims declined to pay.
Details of the Account Takeover
The intrusion affected a number of gay content producers who use X as a promotional channel for their OnlyFans subscriptions. Attackers gained control of the accounts, altered the display settings, and began posting political memes alongside unsolicited cryptocurrency advertisements. Victims observed the sudden surge of unrelated content within minutes of losing access.
Ransom Demands and Crypto Payments
Perpetrators demanded payment in popular digital currencies, specifying amounts in Bitcoin and Ethereum to mask their identities. They threatened to keep the accounts active with the same disruptive content unless the ransom was settled, leveraging the creators’ reliance on follower engagement for revenue. When the creators refused, the attackers intensified the spam, flooding timelines with further crypto promotion.
Implications for Users and Investors
Security experts warn that the episode highlights the vulnerability of social‑media accounts that serve as gateways to revenue streams on platforms like OnlyFans. Investors in blockchain and crypto assets may see heightened scrutiny as malicious actors exploit the anonymity of digital currencies for extortion. Users are advised to enable two‑factor authentication on X and to monitor any unusual activity promptly to protect their online presence.