GitHub notifications abused to impersonate Y Combinator for crypto theft

Published on September 24, 2025

A massive phishing campaign targeted GitHub users with cryptocurrency drainers, delivered via fake invitations to the Y Combinator (YC) W2026 program. [...]