Tell HN: Phishing campaign claiming to be GitHub Developer Fund

31 pointsby bobbiechenvor 10 Monaten12 comments

Just spotted this phishing campaign using GitHub issues to send convincing emails.

Look at this issue and the others in this repo: https://github.com/gitcoinco-n/gitcoin/issues/1 (already reported via GitHub report abuse form)

Every messaging interface will be used for scams, unfortunately.

14 comments

zkittyvor 10 Monaten

I received this email too. The page title was "Gitcoin | $15M Github Developer Fund 2025 (Issue #225)". The application link is https://gitcoin-developers.com. Obviously copied site from https://gitcoin.co Full email is here. https://jumpshare.com/s/p7Nk2sioWJDZpRjhFutY

Aldipowervor 10 Monaten

I have a stale GitHub notification dot now, after they removed this dodgy repository. Damn GitHub is getting so slow and buggy noawdays.

elsecaller0xvor 10 Monaten

so that what it was.

sgerrandvor 10 Monaten

The latest repository being used and advised for this attack is https://github.com/notification-on/gitcoin.com.

Master_Odinvor 10 Monaten

And also https://github.com/notify-hub-co/gitcoin.com.

adamschwartzvor 10 Monaten

And now https://github.com/notify-chains/gitcoin.com :(

maxwellgvor 10 Monaten

The innocuous https://grants.github.com/apply URL goes to a completely different site. Sneaky sneaky.

freakynitvor 10 Monaten

I have received 2 of these in 24 hours. The repos are gone by the next day.

elsecaller0xvor 10 Monaten

I received the email too. It seems that I am not the only one.

esafakvor 10 Monaten

Reported. Let's see how long it takes to get nuked.

xciviixiiivor 10 Monaten

scammy fishing bastard. i have received the same. DO not connect your wallett

CM30vor 10 Monaten

Seems like it's been taken down now, as have all URLs used for this scam. Hopefully it took less than 8 hours to do this, but hey, at least GitHub eventually did something.

vikaswakde42vor 10 Monaten

temidaradevvor 10 Monaten