DEV Community

Cover image for Please confirm this is real
UnitBuilds
UnitBuilds

Posted on

Please confirm this is real

Users mobilize to flag hundreds of phishing links

DEV.to team, please confirm this account is actually yours. As it's sending links for verification 'due to increased bot activity' in the comment sections. Kinda sus because it's a brand new account...

Top comments (25)

Collapse
 
embernoglow profile image
EmberNoGlow •

its scam imho. yes. ban.

Collapse
 
unitbuilds profile image
UnitBuilds •

Definitely, if you can please report. Hopefully the mass report gets the account suspended till a mod shows up

Collapse
 
embernoglow profile image
EmberNoGlow •

done.

Thread Thread
 
unitbuilds profile image
UnitBuilds •

Thank you! I've been going to every single comment that bot has made and commented a warning. It's definitely phishy... Cuz they'd use Sloan, why invent a new account on a sunday when all the mods are offline?

Thread Thread
 
embernoglow profile image
EmberNoGlow •

idk

Collapse
 
unitbuilds profile image
UnitBuilds •

Here's the link: dev.to/dev_supports

Collapse
 
francistrdev profile image
FrancisTRᴅᴇᴠ •

@unitbuilds I wish I could Ban, but I am just a Mod oof. Best thing I can do and what you can do is report :(

Collapse
 
unitbuilds profile image
UnitBuilds •

Damn, fair enough. Though it really needs attention, the 1 account has over 400 comments left like that, the 1 I was going after ended at just shy of 100 (I commented on every 1 of those to guard). Though it made me really think that we need a new report type for phishing/scamming that's faster acting. That someone could release a bot that made 400+ identical comments and external links, impersonating the DEV team is a big problem.

Thread Thread
 
francistrdev profile image
FrancisTRᴅᴇᴠ •

Yea but keep in mind that DEV team is small and MLH is busy. Matter of fact, they are still busy based on what @heyitsjem told me on voice call. Once they are not, then they will have time.

Thread Thread
 
unitbuilds profile image
UnitBuilds •

Jem mentioned, they got them! 2 of the 3 atleast, but combined that's over 500 phishing links.

Thread Thread
 
unitbuilds profile image
UnitBuilds •

And Jem just smashed the 3rd!

Thread Thread
 
francistrdev profile image
FrancisTRᴅᴇᴠ •

ayyyy

Thread Thread
 
unitbuilds profile image
UnitBuilds •

They got 2 gems from me for that! Honestly, deserved, cuz it started becoming an obsession for me to warn people on every new comment those bots left 😅

Collapse
 
unitbuilds profile image
UnitBuilds •

@jess @ben @francistrdev @heyitsjem Can you please look into this, they've left over 200 phishing links now... I commented on the first 100 warning people, but I cant sit 24/7 blocking them off. I emailed [email protected] and [email protected] we need to upgrade the report system to include a phishing option, 10 reports = suspended commenting until reviewed. I'll create the issue for it.

dev.to/dev_supports - Ban please, ASAP

Collapse
 
heyitsjem profile image
Jem •

Both account have been removed

Picked as gem
Collapse
 
unitbuilds profile image
UnitBuilds •

THANK YOU! Just headsup, this 1 is still there: dev.to/dev_support

Thread Thread
 
heyitsjem profile image
Jem •

removed

Picked as gem Thread Thread
 
heyitsjem profile image
Jem •

thank you!

Thread Thread
 
unitbuilds profile image
UnitBuilds •

dev.to/devsupportt - Another one

Collapse
 
unitbuilds profile image
UnitBuilds •

They have 2 more accounts: dev.to/supportdev and dev.to/dev_support @ben @jess @thepracticaldev @heyitsjem @francistrdev

This is turning into a pandemic 😂

Collapse
 
unitbuilds profile image
UnitBuilds •

@thepracticaldev Can someone please take action?

Collapse
 
unitbuilds profile image
UnitBuilds •

@jess @ben @sloan Please advise on whether this is a real DEV official account, else, please look into it ASAP, because they're posting 'verify here' links.

Collapse
 
unitbuilds profile image
UnitBuilds •

@francistrdev Got any idea if this is real? Definitely need to look into it, cuz it's sending 'follow this link to verify your email' stuff in comments. If it's not a legit account, it needs to get blocked ASAP!

Collapse
 
unitbuilds profile image
UnitBuilds •

I reported it to security@ and am going through the comments they left and pasting: Do not follow any external links! DEV.to uses Sloan for automated messages, this is likely phishing. to prevent anyone falling victim till you can confirm please.

Collapse
 
unitbuilds profile image
UnitBuilds •

Sorry, dev.to/dev_supports here's the link to the account.

Some comments have been hidden by the post's author - find out more