SECURITY ISSUE: Malicious script in https://wnaver.github.io/unsubsc

[Licsak25]

Select Topic Area

Question

Body

A malicious script was placed at "https://wnaver.github.io/unsubsc" that forwards to a Chinese site.

https://wnaver.github.io/unsubsc?o5RMwuSzuMfEoLet37vHULQJieE0sUDk3VlOeBtV11A%3D

If you follow the link above, you will be directed to a page that is a FORGED Sumitomo-Mitsui Card membership page. This is the link target in the email received as a phishing email.

The entire email, including the envelope, is in the following text file:
FW 【重要】三井住友銀行カードの身元を確認する1 47 28 PM CDT.txt

decoded body:
decoded body.txt

[ettaboyle]

Hi @Licsak25, 👋🏻 We really appreciate you flagging this. The best route to get this to the proper GitHub team is to use our abuse reporting tools. Here's all the info:

• Reporting abuse or spam
• Reporting a user
• Reporting an issue or pull request
• Reporting a comment

You can report behavior and content that violates community guidelines and terms. We are going to close this post, but for this and any future incidents, please refer to the links above.

Thank you!