Re:GitHub Notification Emails Hijacked to Send Malware
by zahlman on Thursday September 19, 2024 @11:59PM
(#41598681)
Not only does it ask you to copy and paste a command in shell, but Windows apparently warns you that it will run with admin privileges.
Aside from that:
> Nowhere in the email does it say that this is a new issue that has been created, which gives the attacker all the power to establish whatever context they want for this message.
What about the non-user-controlled "(Issue #1)" in the subject line?
Aside from that:
> Nowhere in the email does it say that this is a new issue that has been created, which gives the attacker all the power to establish whatever context they want for this message.
What about the non-user-controlled "(Issue #1)" in the subject line?