I was asked to install malware during a fake interview

(ashishb.net)

54 points | by ashishb a day ago ago

11 comments

  • croemer a day ago

    > If it is open-source, you will see a meaningful activity - stars, forks, contributors.

    That's not true, I'm quite sure most repos on GitHub have neither many stars, nor forks, nor multiple contributors.

    • bryanhogan 21 hours ago

      To add to that, any metrics like these can be quite meaningless since you can just buy them online.

      Please never rely on any such "social" metrics.

    • ashishb 18 hours ago

      This is just a negative filter to see as a warning sign. It is like walking into a dark alley at night.

      Nothing might happen but you should be on the alert.

  • elashri a day ago

    > become a technical advisor for their web3 project

    That by itself should have been the first red flag. I also heard a lot of these stories recently. I think this might be one of the good use cases of GitHub Codespaces.

    • ashishb 18 hours ago

      Not for someone who get 10-20 such requests a year. None till date were such scams.

      • tdeck 18 hours ago

        All of them were scams, this was just the first time you were the intended victim.

        • ashishb 18 hours ago

          Those were real companies. The conversation started online and immediately moved in-person.

          I was never asked to install anything. I was not even given code access (without NDA) and I did get paid with equity/money in cases there was a mutual match and we proceeded.

          • ccimmergreen 17 hours ago

            Oh god, thanks for the heads up. It's a wonder how many people fell for it, definitely non-zero I reckon. I would hate for this to become a thing on LinkedIn.

  • kunley 17 hours ago

    Kudos for giving the actual names of the guys.

    • ashishb 15 hours ago

      Yeah. Real profile names.

      Unlikely that those guys were real. And I did reach out to them for explanation. Only to be blocked by both!

  • flexagoon a day ago

    [dead]