← All stories

Threat intel

OnlyFans Copyright Takedowns Expose Compromised University and Government Websites

Copyright takedown requests linked to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results, Dark Reading reports. UpGuard's Greg Pollock weighs in on what affected institutions and security teams should consider next.

Cover for a threat-intel story

Copyright takedown requests tied to OnlyFans and other adult content creators are exposing a pattern of compromise affecting university and government websites, according to Dark Reading.

The filings reveal how attackers exploit vulnerable sites in these sectors to manipulate search results. University and government domains generally carry strong credibility with search engines, so content planted on them can gain visibility it would not otherwise achieve, making such sites attractive targets for abuse.

The details come from Dark Reading, which discussed the findings with Greg Pollock of security firm UpGuard. Pollock explains what universities, government website operators, and security teams need to think about next as this activity comes to light.

Notably, the takedown requests themselves serve as an unexpected signal. When copyright holders seek the removal of adult content from pages hosted on legitimate institutional domains, those requests effectively point to sites that may have been compromised. For defenders, takedown data can therefore double as an indicator that a web property is hosting unauthorized material without the owner's knowledge.

The reporting underscores the importance for organizations running public-facing websites — particularly in the education and government sectors — to monitor for unauthorized content, keep web applications patched and hardened, and treat unexpected copyright takedown notices as a potential sign of compromise rather than a routine legal matter.

Source: Dark Reading

How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.