@zarfeblong@mastodon.gamedev.place
Post #924248
2026-04-04 14:22 UTC
This is well-organized evil.
https://simonwillison.net/2026/Apr/3/supply-chain-social-engineering/
(Social engineering on an open-source maintainer for a popular package.)
It seems likely that this was a well-funded state actor. But obviously now any idiot can spin up a convincing company web site and a chat room full of apparently human beings with their own web pages and so on.
Replies (1)
-
@zarfeblong@mastodon.gamedev.place 2026-04-04 14:25
Basically, "don't click on the link in that email" and "don't click on the link in that text message" must now now be extended to Discord chats, Slack chats, Zoom calls, MS Teams meetings, etc. Even when you think you're in a real discussion with a real person.