Cyber Threat from Bonnie Blue and Lilly Phillips of OnlyFans

For some time, Cybersecurity Insiders have been alerting readers to the various cyber threats, such as ransomware, malware, crypto-mining software, and DDoS attacks. However, a new and unusual trend has recently gained momentum, rapidly trending on search engines.

A woman named Bonnie Blue has claimed to have participated in a “S@# marathon” in a London mansion, allegedly engaging with over 1,000 men. Not long after, another woman, Lilly Phillips, a well-known figure on the OnlyFans platform, announced that she plans to break this record soon.

While the details of this explicit activity are irrelevant to the broader issue, it’s important to address how these women have become part of a growing cybersecurity threat. Over the past week, numerous LinkedIn, Facebook, and Twitter users have reported receiving emails containing malicious links, promising access to exclusive content from these two women. However, clicking these links leads to websites completely unrelated to the individuals in question, instead redirecting users to malicious sites designed to distribute malware, including encryption tools and spyware.

Cybercriminals often take advantage of trending celebrities to further their malicious agenda, and that’s precisely what is happening here. Users from countries like South Africa, India, Australia, and the Middle East have reported receiving harmful links via LinkedIn messages, commonly known as InMail. These links not only have the potential to infect individual devices but can also spread to connected networks, compromising all devices within that network.

It’s worth noting that most of the profiles spreading this harmful content are either fake or newly created. On a positive note, LinkedIn’s security team is actively filtering these messages through automated systems that flag suspicious content.

This attack has also extended to WhatsApp, where unknown numbers are using marketing tactics to promote these campaigns. WhatsApp, owned by Meta (formerly Facebook), has become another platform where users could fall victim to this threat.

Cybersecurity experts are urging online users to be cautious about such attacks, as clicking on these links could not only harm their devices but also put their personal reputations at risk. Criminals may use the content viewed to blackmail victims, threatening legal action or demanding money. This type of attack, sometimes referred to as a “digital arrest,” involves criminals locking victims in a prolonged conversation, during which they exploit them for financial gain.