Ask HN: Scammer Using Git as CDN – What to Do?

4 points by jwally ↗ HN
I got an e-mail today buy someone using github as a CDN to phish passwords, pretending to be AMEX. He sent it to my "Batteries Plus" e-mail account.

Is there someone I can reach out to to shut this account down?

https://github.com/amxpdashbaord/summary/blob/main/header.js

It's a (poorly) obfuscated form whose POST goes here:

https://kbase.pratesis.com/php/init.php

or here:

https://dentalsline.com/wp-includes/ID3/id3.php

Thanks!

2 comments

[ 0.22 ms ] story [ 16.7 ms ] thread
There is a "Block or Report" link under the main github profile. Perhaps start there ?