Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Tell HN: Phishing campaign claiming to be GitHub Developer Fund
31 points by bobbiechen 4 months ago | hide | past | favorite | 12 comments
Just spotted this phishing campaign using GitHub issues to send convincing emails.

Look at this issue and the others in this repo: https://github.com/gitcoinco-n/gitcoin/issues/1 (already reported via GitHub report abuse form)

Every messaging interface will be used for scams, unfortunately.



I received this email too. The page title was "Gitcoin | $15M Github Developer Fund 2025 (Issue #225)". The application link is https://gitcoin-developers.com. Obviously copied site from https://gitcoin.co Full email is here. https://jumpshare.com/s/p7Nk2sioWJDZpRjhFutY


I have a stale GitHub notification dot now, after they removed this dodgy repository. Damn GitHub is getting so slow and buggy noawdays.


so that what it was.


The latest repository being used and advised for this attack is https://github.com/notification-on/gitcoin.com.


And also https://github.com/notify-hub-co/gitcoin.com.


And now https://github.com/notify-chains/gitcoin.com :(


The innocuous https://grants.github.com/apply URL goes to a completely different site. Sneaky sneaky.


I have received 2 of these in 24 hours. The repos are gone by the next day.


I received the email too. It seems that I am not the only one.


Reported. Let's see how long it takes to get nuked.


scammy fishing bastard. i have received the same. DO not connect your wallett


Seems like it's been taken down now, as have all URLs used for this scam. Hopefully it took less than 8 hours to do this, but hey, at least GitHub eventually did something.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: