76
New scam on GitHub
(lemmy.zip)
These scammers copy the text from new issues verbatim, and paste them in a new issue in a "support" repo. They tag the original author so they get notified.
They then use GitHub Actions to reply with a phishing link and email.
This particular repo has been up for a week and has done this to 113 people.
The link leads to a page that impersonates GitHub support. Every link on that page leads to a crypto scam.
If you stumble across such a repository, please report it. You can report this one here.
Surely this will re-occur anywhere there is sufficient footfall?
GitHub's reporting functions are limited. For example, it's not possible to report the issue or the reply from GitHub Actions. And the form for reporting the whole repository is somewhat broken and annoying to use