Tell HN: Phishing campaign claiming to be GitHub Developer Fund

31 points·bobbiechen··12 comments

Just spotted this phishing campaign using GitHub issues to send convincing emails.

Look at this issue and the others in this repo: https://github.com/gitcoinco-n/gitcoin/issues/1 (already reported via GitHub report abuse form)

Every messaging interface will be used for scams, unfortunately.

View on HN

I received this email too. The page title was "Gitcoin | $15M Github Developer Fund 2025 (Issue #225)". The application link is https://gitcoin-developers.com. Obviously copied site from https://gitcoin.co Full email is here. https://jumpshare.com/s/p7Nk2sioWJDZpRjhFutY

I have a stale GitHub notification dot now, after they removed this dodgy repository. Damn GitHub is getting so slow and buggy noawdays.

so that what it was.

The latest repository being used and advised for this attack is https://github.com/notification-on/gitcoin.com.

And also https://github.com/notify-hub-co/gitcoin.com.

And now https://github.com/notify-chains/gitcoin.com :(

The innocuous https://grants.github.com/apply URL goes to a completely different site. Sneaky sneaky.

I have received 2 of these in 24 hours. The repos are gone by the next day.

I received the email too. It seems that I am not the only one.

Reported. Let's see how long it takes to get nuked.

scammy fishing bastard. i have received the same. DO not connect your wallett

Seems like it's been taken down now, as have all URLs used for this scam. Hopefully it took less than 8 hours to do this, but hey, at least GitHub eventually did something.

Reply on news.ycombinator.com