PSA: Active phishing campaign targeting crypto influencers
Just got hit by @BaoZiDaDa888 trying to recruit me for $SKYLAWS promo. Classic social engineering play:
1. Bait with fake Google Docs contract (empty file)
2. Redirect to "Dropbox" link (malware download)
3. Fallback to Obsidian if you dodge step 2
Endgame: Device compromise + wallet drain
This vector is spreading fast. If anyone DMs you about sponsorships with external file sharing, it's likely malicious. Block, report, move on.
Stay paranoid out there 🛡️
Just got hit by @BaoZiDaDa888 trying to recruit me for $SKYLAWS promo. Classic social engineering play:
1. Bait with fake Google Docs contract (empty file)
2. Redirect to "Dropbox" link (malware download)
3. Fallback to Obsidian if you dodge step 2
Endgame: Device compromise + wallet drain
This vector is spreading fast. If anyone DMs you about sponsorships with external file sharing, it's likely malicious. Block, report, move on.
Stay paranoid out there 🛡️