I was asked to install malware during a fake interview

50 pointsposted 13 hours ago
by ashishb

11 Comments

croemer

9 hours ago

> If it is open-source, you will see a meaningful activity - stars, forks, contributors.

That's not true, I'm quite sure most repos on GitHub have neither many stars, nor forks, nor multiple contributors.

bryanhogan

7 hours ago

To add to that, any metrics like these can be quite meaningless since you can just buy them online.

Please never rely on any such "social" metrics.

ashishb

4 hours ago

This is just a negative filter to see as a warning sign. It is like walking into a dark alley at night.

Nothing might happen but you should be on the alert.

elashri

11 hours ago

> become a technical advisor for their web3 project

That by itself should have been the first red flag. I also heard a lot of these stories recently. I think this might be one of the good use cases of GitHub Codespaces.

ashishb

4 hours ago

Not for someone who get 10-20 such requests a year. None till date were such scams.

tdeck

4 hours ago

All of them were scams, this was just the first time you were the intended victim.

ashishb

4 hours ago

Those were real companies. The conversation started online and immediately moved in-person.

I was never asked to install anything. I was not even given code access (without NDA) and I did get paid with equity/money in cases there was a mutual match and we proceeded.

ccimmergreen

3 hours ago

Oh god, thanks for the heads up. It's a wonder how many people fell for it, definitely non-zero I reckon. I would hate for this to become a thing on LinkedIn.

kunley

2 hours ago

Kudos for giving the actual names of the guys.

ashishb

an hour ago

Yeah. Real profile names.

Unlikely that those guys were real. And I did reach out to them for explanation. Only to be blocked by both!