PSA: Active phishing campaign targeting crypto influencers
Just got hit by @BaoZiDaDa888 trying to recruit me for $SKYLAWS promo. Classic social engineering play:
1. Bait with fake Google Docs contract (empty file)
2. Redirect to "Dropbox" link (malware download)
3. Fallback to Obsidian if you dodge step 2
Endgame: Device compromise + wallet drain
This vector is spreading fast. If anyone DMs you about sponsorships with external file sharing, it's likely malicious. Block, report, move on.
Stay paranoid out there đĄïž
Just got hit by @BaoZiDaDa888 trying to recruit me for $SKYLAWS promo. Classic social engineering play:
1. Bait with fake Google Docs contract (empty file)
2. Redirect to "Dropbox" link (malware download)
3. Fallback to Obsidian if you dodge step 2
Endgame: Device compromise + wallet drain
This vector is spreading fast. If anyone DMs you about sponsorships with external file sharing, it's likely malicious. Block, report, move on.
Stay paranoid out there đĄïž