This week, a string of gay OnlyFans creators had their X accounts hijacked by attackers demanding crypto ransoms. Several victims watched their feeds flood with MAGA propaganda and crypto spam after they refused to pay. One of the most prominent targets was Patrick Bewley, an OnlyFans star.
How the hijackings unfolded
The attackers gained control of the accounts using methods that aren't yet clear. Victims reported losing access to their profiles, with their display names and profile pictures replaced. The ransom demands — paid in cryptocurrency — came via direct messages or changed bios. Those who didn't pay saw their accounts turned into propaganda machines.
The propaganda flood
Once hijacked, the feeds started posting pro-MAGA content and links to crypto scam sites. For the creators, it's a double whammy: losing their platform and having their brand associated with material they don't support. Bewley, who has a large following, hasn't publicly commented on the attack. The timing isn't great — OnlyFans relies heavily on X for traffic.
Uncertainty over security
X hasn't issued a statement about the breaches. The victims are left scrambling to recover their accounts through standard support channels, which can be slow. It's not the first time X accounts have been hijacked for crypto ransoms, but targeting a specific community — gay OnlyFans creators — suggests the attackers did their homework. Whether this is a coordinated campaign or opportunistic targeting remains an open question.
