Hey everyone! I want to share a warning about a recent scam attempt targeting developers.

What Happened: Yesterday, someone tried to scam me by pretending to be an IT recruiter on Linkedin. They sent me a link of a project in bitbucket

How I Identified the Scam:

• Before downloading anything, I checked the branch and discovered an obfuscated code in a file called tailwind.config.js
• After desobfuscating it, I found malicious code were send all the content from .local folder to an IP address in order to get all the sources from crypto wallets to after descrypt and steal all the funds
• The IP address traced back to Turkey, likely using a VPN, and the user claimed to work for a company called StartupCrafters.

Stay Safe:

• Always verify links and check the source before downloading anything.
• If you cannot find nothing suspicious and you are going to run the code better do it in a virtual machine or a computer where there is not relevant data neither any kind of crypto wallets

• Share this information with others to keep our community safe!