GitHub Community
Phishing Email Attempt Masquerading as GitHub Security Alert #139612
-
Select Topic AreaShow & Tell BodyI recently received a suspicious email claiming to be from GitHub, notifying me of a security vulnerability in one of my repositories. The email urged me to visit the website "github-scanner.com" for more information. Upon further inspection, the site appears to be fraudulent and likely part of a phishing attempt
The report on JoeSandbox provides a detailed analysis of the URL "github-scanner.com." It includes behavior-based detection of malicious activities, like suspicious network connections and script execution. The analysis checks for malware, sandbox escapes, and other risks. Key findings in the report likely point to potential phishing, data theft, or malware distribution. It gives a breakdown of network communication, processes involved, and any executable files flagged during the sandbox analysis. For full details, you can view the report here. |
Beta Was this translation helpful? Give feedback.
Replies: 4 comments 2 replies
-
|
Thanks for sharing |
Beta Was this translation helpful? Give feedback.
-
|
@neospl0it |
Beta Was this translation helpful? Give feedback.
-
|
I just similarly received a phishing attempt masquerading as a Github security notification It's extremely well crafted and will give FULL account admin access to the attacker for any user that isn't careful after clicking any link in the email Also note that the email is arriving from 
|
Beta Was this translation helpful? Give feedback.
-
A friend of mine clicked on this but the only thing that appeared on the screen was "this request is suspended". Is there any problem? (2FA On) |
Beta Was this translation helpful? Give feedback.
-
|
I got one of these last night as well. 
Delivered-To: XXXXXXXXXXXX@gmail.com ----==_mimepart_67d6d3eea71f7_94de01982d Stiven-2131 created an issue (ajfisher/aiko-io#5) Security Alert: Unusual Access AttemptWe have detected a login attempt on your GitHub account that appears to be from a new location or device. Login Information
If you recognize this activity, no further action is required. However, if this was not you, we strongly recommend securing your account immediately. Steps to Secure Your Account
Contact SupportIf you need assistance or suspect a security breach, visit: Thank you for keeping your account secure. GitHub Security Team -- Message ID: ajfisher/aiko-io/issues/5@github.com Security Alert: Unusual Access AttemptWe have detected a login attempt on your GitHub account that appears to be from a new location or device. Login Information
If you recognize this activity, no further action is required. However, if this was not you, we strongly recommend securing your account immediately. Steps to Secure Your Account
Contact SupportIf you need assistance or suspect a security breach, visit: Thank you for keeping your account secure. GitHub Security Team —  Stiven-2131 created an issue (ajfisher/aiko-io#5)Security Alert: Unusual Access AttemptWe have detected a login attempt on your GitHub account that appears to be from a new location or device. Login Information
If you recognize this activity, no further action is required. However, if this was not you, we strongly recommend securing your account immediately. Steps to Secure Your Account
Contact SupportIf you need assistance or suspect a security breach, visit: Thank you for keeping your account secure. GitHub Security Team — ----==_mimepart_67d6d3eea71f7_94de01982d-- |
Beta Was this translation helpful? Give feedback.
-
|
Hi @ajfisher , This is a phishing attempt, those aren't GitHub links, as they redirect to " The site has also been suspended. |
Beta Was this translation helpful? Give feedback.
@neospl0it
Thanks for the report! I have routed it to the appropriate channels.