I got compromised today. I do blockchain work and try to be super safe, but I dropped my guard on...I got compromised today. I do blockchain work and try to be super safe, but I dropped my guard on...
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
I got compromised today. I do blockchain work and try to be super safe, but I dropped my guard on this one.
Someone claiming to represent The Sandbox, impersonating one of their lead devs, reached out to me directly in my DMs. Because they used the name of a massive, legit company, I didn't question it. There was no public job listing on the platform, just a direct message, a normal intro, a CV exchange and then a take-home coding test.
I ran the code locally for the technical assessment and it turned out to be malware. My system is down and offline right now. To make matters worse, there wasn't a listed job to flag and I wasn't able to report the profile before they vanished.
I need some advice from the community:
1. What is your go-to method for safely vetting and running these tests? VMs? Cloud sandboxes?
2. When a scammer reaches out directly and you can't report an active job/profile on the platform, where do you report malicious repos or impersonators to get them taken down?
Back to feed
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started