Credential stealing malware targetted adult websites premium users credentials to sell it in dark web. Cybercriminals using a lot of technique to spreading their malware among pornography websites by promoting the porn related tags in Google search results. The 20 most popular make up 80% of all malware disguised as porn. Overall, 87,227 unique users downloaded porn-disguised malware in 2018. Nearly 650,000 users affected in 2018 that drops from adult websites and most of the malware dropped intended to steal the premium porn website accounts.”]
Source: https://gbhackers.com/steal-premium-users-credentials/