GitHub Y Combinator phishing attack

#1

Post by computersuck » Tue, Sep 23, 2025, 10:46 PM UTC

GitHub Y Combinator phishing attack
github.com

Re: GitHub Y Combinator phishing attack

#2

Post by computersuck » Tue, Sep 23, 2025, 10:46 PM UTC

This is sending email notifications to github users tagged by username. The link seems to just go to gitlab for now, not sure what the deal is with that.

The email bait is crypto wallet related.

Re: GitHub Y Combinator phishing attack

#3

Post by computersuck » Tue, Sep 23, 2025, 10:51 PM UTC

Link has been taken down by Github since being reported.

Archive:

https://archive.md/5tlLi

Re: GitHub Y Combinator phishing attack

#4

Post by Bender » Tue, Sep 23, 2025, 10:57 PM UTC

Related [1]. There are a few links.

[1] - https://news.ycombinator.com/item?id=45352610

Re: GitHub Y Combinator phishing attack

#5

Post by om8 » Tue, Sep 23, 2025, 11:06 PM UTC

Also got it, found this thread by googling "ycombiinator"

Re: GitHub Y Combinator phishing attack

#6

Post by skywhopper » Tue, Sep 23, 2025, 11:49 PM UTC

I got one with a slightly different misspelling of ycombinator. Luckily it seems like GitHub is on top of it.

Re: GitHub Y Combinator phishing attack

#7

Post by its-all-waves » Wed, Sep 24, 2025, 1:26 AM UTC

Also hit with the slightly different spelling.