Free OnlyFans Lure Used to Spread Cross-Platform CRPx0 Malware

Cybercriminals are using the lure of free OnlyFans accounts to distribute CRPx0, a sophisticated cross-platform malware targeting Windows and macOS users. The malware operates in three stages: first stealing cryptocurrency by swapping wallet addresses in the clipboard, then exfiltrating sensitive data, and finally deploying ransomware that encrypts files with a ransom demand. The campaign has reportedly compromised 38 victims and is offering stolen data for 500 dollars in cryptocurrency on a dark web leaks site, demonstrating how social engineering combined with users' willingness to take risks for free content creates an effective attack vector.