2026 Talk
Talk Title: From OnlyFans to Online Casinos: Threat Hunting in Google's DMCA Data
Talk Abstract:
Almost 18 billion URLs have been reported to Google for alleged copyright infringement, a dataset they make public. Buried amongst those URLs are competing interests fighting over how to use and abuse search results. In my research covered by Wired ("OnlyFans Models Are Accidentally Making Hacked Government Websites Disappear"), I showed how URLs infringing on adult content can be used to find compromised sites. This strategy can be extended to uncover other campaigns, like the Indonesian gambling sites impersonating the government to launch DMCA requests against rival sites. In this talk I'll introduce the background of the dataset, other similar data available, some threat campaigns I've traced using the DMCA dataset, and ideas on how red and blue teams might use this data as a source of threat intel.