Phishing Campaign Claiming to Be Github Developer Fund

Posted4 months agoActive3 months ago

bobbiechen

31 points

12 comments

Techstory

heatednegative

Debate

20/100

PhishingGithubScams

Key topics

Phishing

Github

Scams

Just spotted this phishing campaign using GitHub issues to send convincing emails.

Look at this issue and the others in this repo: https://github.com/gitcoinco-n/gitcoin/issues/1 (already reported via GitHub report abuse form)

Every messaging interface will be used for scams, unfortunately.

A phishing campaign is using GitHub issues to send convincing emails claiming to be from the GitHub Developer Fund, with users reporting and discussing the scam.

Snapshot generated from the HN discussion

Discussion Activity

Light discussion

First comment

Peak period

42-48h

Avg / period

1.5

Comment distribution12 data points

Loading chart...

Based on 12 loaded comments

Key moments

01Story posted
Sep 19, 2025 at 8:41 PM EDT
4 months ago
Step 01
02First comment
Sep 19, 2025 at 8:44 PM EDT
2m after posting
Step 02
03Peak activity
3 comments in 42-48h
Hottest window of the conversation
Step 03
04Latest activity
Sep 23, 2025 at 11:22 AM EDT
3 months ago
Step 04

Generating AI Summary...

Analyzing up to 500 comments to identify key contributors and discussion patterns

Discussion (12 comments)

Showing 12 comments

sgerrand

3 months ago

1 reply

The latest repository being used and advised for this attack is https://github.com/notification-on/gitcoin.com.

Master_Odin

3 months ago

1 reply

And also https://github.com/notify-hub-co/gitcoin.com.

adamschwartz

3 months ago

And now https://github.com/notify-chains/gitcoin.com :(

Aldipower

3 months ago

1 reply

I have a stale GitHub notification dot now, after they removed this dodgy repository. Damn GitHub is getting so slow and buggy noawdays.

elsecaller0x

3 months ago

so that what it was.

CM30

3 months ago

Seems like it's been taken down now, as have all URLs used for this scam. Hopefully it took less than 8 hours to do this, but hey, at least GitHub eventually did something.

esafak

4 months ago

Reported. Let's see how long it takes to get nuked.

freakynit

3 months ago

I have received 2 of these in 24 hours. The repos are gone by the next day.

maxwellg

4 months ago

The innocuous https://grants.github.com/apply URL goes to a completely different site. Sneaky sneaky.

zkitty

3 months ago

I received this email too. The page title was "Gitcoin | $15M Github Developer Fund 2025 (Issue #225)". The application link is https://gitcoin-developers.com. Obviously copied site from https://gitcoin.co Full email is here. https://jumpshare.com/s/p7Nk2sioWJDZpRjhFutY

xciviixiii

3 months ago

scammy fishing bastard. i have received the same. DO not connect your wallett

elsecaller0x

3 months ago

I received the email too. It seems that I am not the only one.

View full discussion on Hacker News

ID: 45308596Type: storyLast synced: 11/20/2025, 3:53:09 PM

Want the full context?