18 ms·

Tell HN: Phishing campaign claiming to be GitHub Developer Fund

31 points by bobbiechen 1y ago

Just spotted this phishing campaign using GitHub issues to send convincing emails. Look at this issue and the others in this repo: https://github.com/gitcoinco-n/gitcoin/issues/1 (already reported via GitHub report abuse form) Every messaging interface will be used for scams, unfortunately.

maxwellg 1y ago
The innocuous https://grants.github.com/apply https://grants.github.com/apply URL goes to a completely different site. Sneaky sneaky.
esafak 1y ago
Reported. Let's see how long it takes to get nuked.
CM30 1y ago
Seems like it's been taken down now, as have all URLs used for this scam. Hopefully it took less than 8 hours to do this, but hey, at least GitHub eventually did something.
sgerrand 1y ago
The latest repository being used and advised for this attack is https://github.com/notification-on/gitcoin.com https://github.com/notification-on/gitcoin.com.
- Master_Odin 1y ago
  And also https://github.com/notify-hub-co/gitcoin.com https://github.com/notify-hub-co/gitcoin.com.
  - adamschwartz 1y ago
    And now https://github.com/notify-chains/gitcoin.com https://github.com/notify-chains/gitcoin.com :(
zkitty 1y ago
I received this email too. The page title was "Gitcoin | $15M Github Developer Fund 2025 (Issue #225)". The application link is https://gitcoin-developers.com https://gitcoin-developers.com. Obviously copied site from https://gitcoin.co https://gitcoin.co Full email is here. https://jumpshare.com/s/p7Nk2sioWJDZpRjhFutY https://jumpshare.com/s/p7Nk2sioWJDZpRjhFutY
freakynit 1y ago
I have received 2 of these in 24 hours. The repos are gone by the next day.
Aldipower 1y ago
I have a stale GitHub notification dot now, after they removed this dodgy repository. Damn GitHub is getting so slow and buggy noawdays.
- elsecaller0x 1y ago
  so that what it was.
temidaradev 1y ago
[dead]
vikaswakde42 1y ago
[dead]
elsecaller0x 1y ago
I received the email too. It seems that I am not the only one.
xciviixiii 1y ago
scammy fishing bastard. i have received the same. DO not connect your wallett

31 points by bobbiechen 1y ago

maxwellg 1y ago

The innocuous https://grants.github.com/apply https://grants.github.com/apply URL goes to a completely different site. Sneaky sneaky.

esafak 1y ago

Reported. Let's see how long it takes to get nuked.

CM30 1y ago

Seems like it's been taken down now, as have all URLs used for this scam. Hopefully it took less than 8 hours to do this, but hey, at least GitHub eventually did something.

sgerrand 1y ago

The latest repository being used and advised for this attack is https://github.com/notification-on/gitcoin.com https://github.com/notification-on/gitcoin.com.

Master_Odin 1y ago
And also https://github.com/notify-hub-co/gitcoin.com https://github.com/notify-hub-co/gitcoin.com.
- adamschwartz 1y ago
  And now https://github.com/notify-chains/gitcoin.com https://github.com/notify-chains/gitcoin.com :(

zkitty 1y ago

I received this email too. The page title was "Gitcoin | $15M Github Developer Fund 2025 (Issue #225)". The application link is https://gitcoin-developers.com https://gitcoin-developers.com. Obviously copied site from https://gitcoin.co https://gitcoin.co Full email is here. https://jumpshare.com/s/p7Nk2sioWJDZpRjhFutY https://jumpshare.com/s/p7Nk2sioWJDZpRjhFutY

freakynit 1y ago

I have received 2 of these in 24 hours. The repos are gone by the next day.

Aldipower 1y ago

I have a stale GitHub notification dot now, after they removed this dodgy repository. Damn GitHub is getting so slow and buggy noawdays.

elsecaller0x 1y ago
so that what it was.

temidaradev 1y ago

[dead]

vikaswakde42 1y ago

[dead]

elsecaller0x 1y ago

I received the email too. It seems that I am not the only one.

xciviixiii 1y ago

scammy fishing bastard. i have received the same. DO not connect your wallett