How Hackers Weaponized DEV.to's Mention System to Spread a Phishing Scam
Jack
- Comments13
Jack
If you received an email today saying "Mandatory user verification" with a 12-hour deadline, DO NOT...
If you received an email today saying "Mandatory user verification" with a 12-hour deadline, DO NOT CLICK THE LINK.
I woke up to an email notification from DEV.to stating that a user named 𝘿𝙚𝙫 𝙎𝙪𝙥𝙥𝙤𝙧𝙩 𝙏𝙚𝙖𝙢 had mentioned me in a comment. Upon opening the post, I found a massive phishing campaign that has successfully infected the platform.
Excerpt from DEV Community ↗, by Jack.
How Hackers Weaponized DEV.to's Mention System to Spread a Phishing Scam was first seen on DEV Community · Top this week on Nov 5, 2026. Since then it has appeared in 12 checks on 1 different day. Its best position was #11 of 30, reached on Nov 5, 13:43 UTC. It dropped off the list after Nov 5, 14:43 UTC.
Position on DEV Community · Top this week at every check (lower is better).
Best rank per day (UTC).
Platform metric as reported by DEV Community.
Archived daily, weekly and monthly lists that include this entry.
Not at the moment. It was last on the list on Nov 5, 14:43 UTC, after 1 day of trending.
#11 on DEV Community · Top this week, on Nov 5, 13:43 UTC. Trendoday checks this list every 60 minutes.
It was first seen on Nov 5, 2026 and has been on the list on 1 day (12 checks) since.