By
Threat actors abused an open redirect on the official website of the United Kingdom's Department for Environment, Food & Rural Affairs (DEFRA) to direct visitors to fake OnlyFans adult dating sites.
OnlyFans is a content subscription service where paid subscribers get access to private photos, videos, and posts from adult models, celebrities, and social media personalities.
As it is a widely used site, and the name is recognizable, threat actors have created a series of fake OnlyFans adult dating sites to gain subscribers or steal people's personal information.
Abusing open redirect on DEFRA
As part of this malicious campaign, threat actors abused an open redirect at that looked like a legitimate U.K. government link but redirected visitors to the fake OnlyFans dating site.
An example of this redirect is below:
http://riverconditions.environment-agency.gov.uk/relatedlink.html?class=link&link=https://pentestpartners.com
Redirects are legitimate URLs on website web addresses that automatically redirect users from the initial site to another URL, commonly at an external site.
For example, a website could have a redirect like www.example.com/redirect/www.google.com, which, when clicked, automatically redirects the user to Google.
An open redirect can be modified by anyone, allowing threat actors and scammers to create redirects from a legitimate site to any site they want.
This allows threat actors to abuse open redirects and cause legitimate links to...
Read Full Story: https://news.google.com/__i/rss/rd/articles/CBMidGh0dHBzOi8vd3d3LmJsZWVwaW5nY29tcHV0ZXIuY29tL25ld3Mvc2VjdXJpdHkvZmFrZS1vbmx5ZmFucy1kYXRpbmctc2l0ZXMtYWJ1c2UtdWstZW52aXJvbm1lbnQtYWdlbmN5LW9wZW4tcmVkaXJlY3Qv0gF4aHR0cHM6Ly93d3cuYmxlZXBpbmdjb21wdXRlci5jb20vbmV3cy9zZWN1cml0eS9mYWtlLW9ubHlmYW5zLWRhdGluZy1zaXRlcy1hYnVzZS11ay1lbnZpcm9ubWVudC1hZ2VuY3ktb3Blbi1yZWRpcmVjdC9hbXAv?oc=5
Your content is great. However, if any of the content contained herein violates any rights of yours, including those of copyright, please contact us immediately by e-mail at media[@]kissrpr.com.
