News for hackers. Stuff that matters.

A comment on I found 1000 GitHub repos with malware. Can we get them deleted?. Parent comment

Re:I found 1000 GitHub repos with malware. Can we get them d... by mcny on Friday February 28, 2025 @06:03AM (#43204294)
I use (redacted).on Microsoft.com tenant which is free of cost to me as a sandbox to learn about office 365 admin stuff. I don't work on it every day but it is nice to have this sandbox. I don't send spam or phishing emails. I don't send emails from this tenant at all to others, only to my own email addresses or to people I know for testing purposes.
[ Parent | on HN ]
Re:I found 1000 GitHub repos with malware. Can we get them d... by rwmj on Friday February 28, 2025 @06:05AM (#43204308)
Presumably you don't send out emails appearing to come from [email protected] saying things like "Reminder: You've still got a money request", with an HTML body that looks exactly like Paypal but contains a fraudulent link and phone number, so you should be fine.
[ Parent | on HN ]
Re:I found 1000 GitHub repos with malware. Can we get them d... by mirashii on Friday February 28, 2025 @07:15AM (#43204770)
Or, worse, I find that most of these are real links from real paypal.

https://www.fortinet.com/blog/threat-research/phish-free-pay...

[ Parent | on HN ]
Re:I found 1000 GitHub repos with malware. Can we get them d... by mcny on Friday February 28, 2025 @06:12AM (#43204348)
No, I didn't. I did get those emails a lot on my university dot edu email. I understand there are legacy/compatibility challenges with the telephone infrastructure but you'd think this problem is entirely solvable with emails. :/
[ Parent | on HN ]
Re:I found 1000 GitHub repos with malware. Can we get them d... by brandonp0 on Friday February 28, 2025 @07:42AM (#43204995)
It is easily solvable. But it has to be implemented on the receiving side. Ask your university to put something in place!
[ Parent | on HN ]