DEV.to team, please confirm this account is actually yours. As it's sending links for verification 'due to increased bot activity' in the comment sections. Kinda sus because it's a brand new account...
Users mobilize to flag hundreds of phishing links
Top comments (25)
its scam imho. yes. ban.
Definitely, if you can please report. Hopefully the mass report gets the account suspended till a mod shows up
done.
Thank you! I've been going to every single comment that bot has made and commented a warning. It's definitely phishy... Cuz they'd use Sloan, why invent a new account on a sunday when all the mods are offline?
idk
Here's the link: dev.to/dev_supports
@unitbuilds I wish I could Ban, but I am just a Mod oof. Best thing I can do and what you can do is report :(
Damn, fair enough. Though it really needs attention, the 1 account has over 400 comments left like that, the 1 I was going after ended at just shy of 100 (I commented on every 1 of those to guard). Though it made me really think that we need a new report type for phishing/scamming that's faster acting. That someone could release a bot that made 400+ identical comments and external links, impersonating the DEV team is a big problem.
Yea but keep in mind that DEV team is small and MLH is busy. Matter of fact, they are still busy based on what @heyitsjem told me on voice call. Once they are not, then they will have time.
Jem mentioned, they got them! 2 of the 3 atleast, but combined that's over 500 phishing links.
And Jem just smashed the 3rd!
ayyyy
They got 2 gems from me for that! Honestly, deserved, cuz it started becoming an obsession for me to warn people on every new comment those bots left 😅
@jess @ben @francistrdev @heyitsjem Can you please look into this, they've left over 200 phishing links now... I commented on the first 100 warning people, but I cant sit 24/7 blocking them off. I emailed security@dev.to and support@dev.to we need to upgrade the report system to include a phishing option, 10 reports = suspended commenting until reviewed. I'll create the issue for it.
dev.to/dev_supports - Ban please, ASAP
Both account have been removed
THANK YOU! Just headsup, this 1 is still there: dev.to/dev_support
removed
thank you!
dev.to/devsupportt - Another one
They have 2 more accounts: dev.to/supportdev and dev.to/dev_support @ben @jess @thepracticaldev @heyitsjem @francistrdev
This is turning into a pandemic 😂
@thepracticaldev Can someone please take action?
@jess @ben @sloan Please advise on whether this is a real DEV official account, else, please look into it ASAP, because they're posting 'verify here' links.
@francistrdev Got any idea if this is real? Definitely need to look into it, cuz it's sending 'follow this link to verify your email' stuff in comments. If it's not a legit account, it needs to get blocked ASAP!
I reported it to security@ and am going through the comments they left and pasting: Do not follow any external links! DEV.to uses Sloan for automated messages, this is likely phishing. to prevent anyone falling victim till you can confirm please.
Sorry, dev.to/dev_supports here's the link to the account.
Some comments have been hidden by the post's author - find out more