⚠️ SCAM ALERT: Fake job offers targeting designers on Contra
Heads up, I recently got hit with a pretty convincing scam and want to make sure other freelancers on here don't fall for it.
I received two nearly identical emails, one from alex@dscufo.xyz and the other from harper.danie95@gmail.com, both pitching a company called ECHO and a product designer role. One of them even booked a call through my Calendly to make it look more legitimate.
They sent me to dscufo.xyz/career/design to apply. After filling out the form, they asked me to run a terminal command to "proceed with onboarding." That's where it got sketchy. The command was a one-liner designed to execute blindly, used a flag that disables SSL verification, and pulled from a suspicious domain. Classic malware/crypto-miner stuff.
No legitimate company will ever ask you to run a terminal command as part of a hiring process. If you get anything from DscUFO, ECHO, or a similar setup, don't click, don't apply, don't run anything. Just report it.
Thankfully my collaborator figured out what's happening before we proceeded with applying for that project, but it's insane the kind of ideas they keep coming up with and how far they're willing to do. Scary how sophisticated it's all getting.
Thanks for sharing! I had the same situation with them and started searching online whether it's okay to run a terminal command to 'proceed with onboarding,' and found your post.
Liquid Chromatic Gallery - an immersive, infinite visual experience powered by fluid motion with Framer Component
Scrolling becomes part of the visual experience, with smooth, liquid-like movement and prism chrome effect that gives the entire website a more dynamic, expressive and memorable feel.