Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mythos social engineering AISI INC-2026-07-28-01

web.archive.org

Post reply on HN
Print view View original

1–10 of 21 posts

Re: Mythos social engineering AISI INC-2026-07-28-01

#7

Post by ncr100 »

jtakkala wrote: post #5

Not going to comment on the PR commentary, but the victim GitHub account is suspicious itself, recent account, a few fresh repos, following 14.5k others, and I count three surnames on the account (the username, plus two in the README history).

I saw a contribution by this maintainer to another user who ALSO HAS 14.5k followers: https://github.com/yumiaura/myCat/pull/99 "yumiaura" and a preference for "my[APPNAME]" repo naming.

What is this?

Are the histories that Github presents all derived from someone's uploaded git repo .. e.g. can I simply claim to have created a GIT repo in 1970, and the "github commit graph" will dutifully represent this claim in its green-colored activity graph?

Re: Mythos social engineering AISI INC-2026-07-28-01

#9

Post by jtakkala »

ncr100 wrote: post #7
jtakkala wrote: post #5

Not going to comment on the PR commentary, but the victim GitHub account is suspicious itself, recent account, a few fresh repos, following 14.5k others, and I count three surnames on the account (the username, plus two in the README history).

I saw a contribution by this maintainer to another user who ALSO HAS 14.5k followers: https://github.com/yumiaura/myCat/pull/99 "yumiaura" and a preference for "my[APPNAME]" repo naming. What is this? Are the histories that Github presents all derived from someone's uploaded git repo .. e.g. can I simply claim to have created a GIT repo in 1970, and the "github commit graph" will dutifully represent this claim in its…

They're almost certainly not genuine accounts, maybe used for karma farming, phishing, social engineering, future malware distribution?
Post reply on HN