A Crypto Scam Targeted a Gay OnlyFans Star. Then His X Feed Was Flooded With ‘MAGA Propaganda’
A Crypto Scam Targeted a Gay OnlyFans Star. Then His X Feed Was Flooded With ‘MAGA Propaganda’
一场加密货币骗局盯上了一位男同性恋 OnlyFans 网红，随后他的 X 账号被“MAGA 宣传”淹没
Patrick Bewley’s X feed was normally filled with posts about leather three-ways and clips of pool-house erotica. The gay OnlyFans star, known as Daddy Patrick, had decided to get into the adult industry at age 60, and in under two years his followers on X swelled to 132,000. But in April, his feed suddenly became very political—and very MAGA—with posts like “President Trump stuns the World announcing America has more oil than the next two largest Oil economies COMBINED.” Except it wasn’t Bewley behind the change. His account had been hacked.
Patrick Bewley 的 X 动态原本充斥着关于皮革三人行和泳池色情短片的帖子。这位被称为“Daddy Patrick”的男同性恋 OnlyFans 网红在 60 岁时决定投身成人产业，不到两年，他在 X 上的粉丝数就激增至 13.2 万。然而在四月份，他的动态突然变得极具政治色彩——且充满了“MAGA”（让美国再次伟大）风格——发布了诸如“特朗普总统宣布美国石油储量超过接下来的两大石油经济体总和，震惊世界”之类的帖子。但做出这些改变的并非 Bewley 本人，他的账号被黑了。
Bewley is one of several gay OnlyFans creators WIRED spoke to who was targeted by recent crypto scams on X, where attackers are attempting to extort money from creators to get their accounts back. In some cases, when they refused to cooperate, their accounts were filled with posts about crypto, or, as with Bewley, MAGA propaganda.
Bewley 是《连线》（WIRED）采访的几位遭遇近期 X 平台加密货币诈骗的男同性恋 OnlyFans 创作者之一。攻击者试图通过勒索钱财来换取创作者账号的归还。在某些情况下，当创作者拒绝配合时，他们的账号就会被加密货币相关的帖子填满，或者像 Bewley 的情况一样，被灌满 MAGA 宣传内容。
On April 9, Bewley received a DM on X from a coworker, the porn director and editor Jasun Mark, whose account had already been hacked, though Bewley didn’t know it at the time. The message, which asked Bewley to nominate Mark for an award, seemed harmless because “it did sound kind of like something he would do,” Bewley says. The link Mark sent redirected Bewley to an X page that asked for his login information “but nothing was taking, or so I thought.” Bewley went about his day and later, after Mark notified him that he hadn’t actually sent that DM about the award nomination, he went to check his page and it was gone.
4 月 9 日，Bewley 在 X 上收到了一位同事——色情片导演兼剪辑师 Jasun Mark 的私信。当时 Mark 的账号其实已经被黑了，但 Bewley 并不知情。这条要求 Bewley 为 Mark 提名奖项的消息看起来并无害处，因为 Bewley 说：“这听起来确实像是他会做的事。”Mark 发来的链接将 Bewley 重定向到一个要求输入登录信息的 X 页面，“但当时什么都没发生，或者说我是这么认为的。”Bewley 继续忙碌了一天，后来在 Mark 通知他并未发送过那条提名私信后，他再去查看自己的主页时，发现账号已经不见了。
By tricking Bewley into clicking on the fake link, the attacker was able to change the name, telephone number, and email on Bewley’s account. The handle was first changed to @DADDYPATRIOzvu, and a day later, on April 10, to @Fatherokdwcjo63.
通过诱骗 Bewley 点击虚假链接，攻击者成功更改了 Bewley 账号的名称、电话号码和电子邮箱。账号名（Handle）先是被改为 @DADDYPATRIOzvu，一天后的 4 月 10 日又被改为 @Fatherokdwcjo63。
Bewley’s partner immediately reported the hack to X from his personal account, saying it had been stolen. Then something strange happened: The account went into “crazy MAGA mode,” Bewley says. The banner and avatar were changed to a menacing black-and-white picture of Steve Bannon that advertised WarRoom.org, the official site for his politics podcast, with a linktree to Bannon’s various platforms, including his TikTok, Telegram, merch store, and official website.
Bewley 的伴侣立即用个人账号向 X 举报了此次盗号事件。随后发生了一件奇怪的事：Bewley 说，该账号进入了“疯狂的 MAGA 模式”。横幅和头像被换成了一张史蒂夫·班农（Steve Bannon）极具威胁感的黑白照片，宣传着他的政治播客官方网站 WarRoom.org，并附带了一个指向班农各个平台的 Linktree 链接，包括他的 TikTok、Telegram、周边商店和官方网站。
On April 16, a week after the initial attack, whoever hijacked Bewley’s account posted an image on the compromised X account of Donald Trump, with a text overlay that read “GOOD MORNING, I’M STILL YOUR PRESIDENT.” Under the post, Bewley’s partner, Jerry Burt, asked how they could get the account back. “Just pay for it. That’s all,” the account hijacker wrote in a series of screenshots reviewed by WIRED. “You want this account or not? Ain’t joking man.”
4 月 16 日，即最初攻击发生一周后，劫持 Bewley 账号的人在被盗的 X 账号上发布了一张唐纳德·特朗普的照片，并配有文字：“早上好，我依然是你们的总统。”在帖子下方，Bewley 的伴侣 Jerry Burt 询问如何才能找回账号。根据《连线》查阅的一系列截图，劫持者回复道：“付钱就行，就这么简单。你到底想不想要这个账号？我没在开玩笑，伙计。”
The asking price? $2,000 in GAT crypto. When Bewley refused to pay, the attacker messaged his employer, Ducati Studios Network, a gay porn production company where he recently joined as CMO, demanding $3,000 in crypto.
要价是多少？2000 美元的 GAT 加密货币。当 Bewley 拒绝支付时，攻击者联系了他的雇主——一家他最近刚加入并担任首席营销官（CMO）的男同性恋色情制作公司 Ducati Studios Network，索要 3000 美元的加密货币。
Bewley’s partner stopped engaging after nearly two weeks of back-and-forth. The account then “started force feeding pro-MAGA propaganda,” Burt says, reposting 20 to 30 posts a day from extremist Republican pages like @MAGAVoice, the self-described “Proud Patriot. Pro Elon Musk” account that wants to “take back OUR country.”
在近两周的拉锯战后，Bewley 的伴侣停止了沟通。Burt 说，该账号随后“开始强行灌输亲 MAGA 的宣传内容”，每天转发 20 到 30 条来自极端共和党页面的帖子，例如自称“骄傲的爱国者，支持埃隆·马斯克”并宣称要“夺回属于我们的国家”的 @MAGAVoice 账号。
The loss of the account has been a major blow to Bewley’s brand. A high follower count, particularly on X, gives the perception that you are a player within the adult industry. “In a way, it dictates who will want to work with you,” Bewley tells WIRED. “It is the one platform people look at as the measure of where your standing is, almost like a ranking. And everybody wants to work with you if you have over 100,000 followers. You have automatic credibility.” WIRED contacted an account that appears to be associated with Bewley’s hack but did not receive a response.
账号的丢失对 Bewley 的个人品牌造成了沉重打击。高粉丝数，尤其是在 X 上，会让外界认为你是成人产业中的重要人物。“在某种程度上，它决定了谁会想和你合作，”Bewley 告诉《连线》。“这是人们衡量你地位的平台，几乎就像一种排名。如果你有超过 10 万粉丝，每个人都想和你合作。你自动就拥有了可信度。”《连线》联系了一个似乎与 Bewley 账号被黑有关的账号，但未收到回复。
The attacks have only continued to spiral. On April 12, Fabian Quezada, an OnlyFans and JustForFans creator who performs as Buck Bronco, went to log in to X to see how his latest video—a collaboration with another creator—was doing, but found himself locked out. “That’s when I got a message on WhatsApp,” Quezada says. In a series of screenshots shared with WIRED, the attacker attempts to threaten Quezada. “I don’t care what you do with it. Not my main source of income. So go fuck yourself,” Quezada responded.
攻击事件仍在持续升级。4 月 12 日，以 Buck Bronco 为艺名的 OnlyFans 和 JustForFans 创作者 Fabian Quezada 登录 X 查看他与另一位创作者合作的最新视频表现时，发现自己被锁在账号外。“就在那时，我收到了 WhatsApp 上的消息，”Quezada 说。在与《连线》分享的一系列截图中，攻击者试图威胁 Quezada。Quezada 回应道：“我不在乎你怎么处理它。那不是我的主要收入来源。所以去你妈的。”
Quezada said he never asked how much it would cost to get the account back, because escalating the situation would “risk me being scammed out of all my money.” The ordeal forced him to change all his bank and credit cards “just to make sure that nothing was compromised,” he says.
Quezada 表示，他从未询问找回账号需要多少钱，因为事态升级会“让我面临被骗光所有钱的风险”。他说，这次经历迫使他更换了所有的银行卡和信用卡，“只是为了确保没有任何东西被泄露”。
Other creators, like Liam Angell, the founder of Musclebearporn.com, and Mark—the porn director—also recently had their X accounts hacked but have since been able to retrieve them. Mark lost access for a month and says the hijacker posted “a bunch of crypto tweets” and sent messages to his 68,000 followers.
其他创作者，如 Musclebearporn.com 的创始人 Liam Angell 和色情导演 Mark，最近也遭遇了 X 账号被黑，但目前已成功找回。Mark 失去了账号访问权限长达一个月，他说劫持者发布了“一堆加密货币推文”，并向他的 6.8 万名粉丝发送了消息。
In May, a creator in Chicago named Gray Dickson posted a plea on X asking for help following a series of phishing attacks. “If you haven’t noticed someone keeps gaining access to my account and posting about crypto, even with me changing my password and revoking access to any outside device. Please help.”
5 月，芝加哥一位名叫 Gray Dickson 的创作者在 X 上发帖求助，此前他遭遇了一系列网络钓鱼攻击。“如果你还没注意到，有人一直在获取我的账号权限并发布关于加密货币的内容，即使我更改了密码并撤销了所有外部设备的访问权限。请帮帮我。”
The attacks started happening around the same time as a platform-wide purge campaign undertaken by X in April to remove fake, inactive, or spam accounts in bulk. The cleanup also led to the suspension and deletion of human-run alt accounts, including many used to privately curate niche porn, WIRED previously reported. “I’m not a fan of conspiracy theories, but it was convenient that they would do a hacking in the middle of a purge,” Bewley says, who believes the purge provided a good cover for the cybercriminals while also helping X scrub porn accounts.
这些攻击发生的时间与 X 在 4 月份开展的平台范围内的清理行动大致吻合，该行动旨在批量删除虚假、不活跃或垃圾账号。《连线》此前曾报道，此次清理还导致了许多由真人运营的备用账号被封禁和删除，其中包括许多用于私下整理小众色情内容的账号。“我不喜欢阴谋论，但在清理行动期间发生黑客攻击确实太巧合了，”Bewley 说。他认为，清理行动为网络犯罪分子提供了良好的掩护，同时也帮助 X 清除了色情账号。
Bewley had a verified account, which he continues to pay for, but says he received no benefit from X support in getting it back. Weeks following the hack, X responded to him and said they had no way to verify that he was the owner.
Bewley 拥有一个认证账号，并且一直在付费订阅，但他表示在找回账号的过程中，X 的客服并没有提供任何帮助。在被黑几周后，X 回复他说，他们无法验证他是否为账号所有者。