{"id":222661,"date":"2025-09-30T04:26:22","date_gmt":"2025-09-30T09:26:22","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2025\/09\/github-notifications-abused-to-impersonate-y-combinator-for-crypto-theft"},"modified":"2025-09-30T04:26:22","modified_gmt":"2025-09-30T09:26:22","slug":"github-notifications-abused-to-impersonate-y-combinator-for-crypto-theft","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2025\/09\/github-notifications-abused-to-impersonate-y-combinator-for-crypto-theft","title":{"rendered":"GitHub notifications abused to impersonate Y Combinator for crypto theft"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/github-notifications-abused-to-impersonate-y-combinator-for-crypto-theft.jpg\"><\/a><\/p>\n<p>A massive phishing campaign targeted GitHub users with cryptocurrency drainers, delivered via fake invitations to the Y Combinator (YC) W2026 program.<\/p>\n<p>Y Combinator is a startup accelerator that funds and mentors projects in their early stages, and connects founders with a network of alumni and venture capital firms.<\/p>\n<p>The attacker abused GitHub\u2019s notification system to deliver the fraudulent messages, by creating issues across multiple repositories and tagging targeted users.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A massive phishing campaign targeted GitHub users with cryptocurrency drainers, delivered via fake invitations to the Y Combinator (YC) W2026 program. Y Combinator is a startup accelerator that funds and mentors projects in their early stages, and connects founders with a network of alumni and venture capital firms. The attacker abused GitHub\u2019s notification system to [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1761,34,45],"tags":[],"class_list":["post-222661","post","type-post","status-publish","format-standard","hentry","category-cryptocurrencies","category-cybercrime-malcode","category-finance"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/222661","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=222661"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/222661\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=222661"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=222661"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=222661"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}