CRPx0 Malware Campaign Exploits Free OnlyFans Lure to Target Multiple Platforms
A new malware campaign, CRPx0, is exploiting the lure of free OnlyFans accounts to spread across macOS and Windows systems, with potential capabilities for Linux. The campaign, analyzed by Aryaka Threat Research Labs, uses social engineering tactics to entice users into downloading a malicious zip file under the guise of free OnlyFans access. Once downloaded, the malware installs itself, allowing attackers to steal cryptocurrency, exfiltrate data, and deploy ransomware. The malware is sophisticated, maintaining persistence and updating itself through a command and control (C2) server. The campaign has already claimed 38 victims, with data being sold on a leaks site. 
