logoalt Hacker News

tristanj • yesterday at 10:53 PM • 0 replies • view on HN

Pure speculation, this could be part of a North Korean job seeking program where they masquerade as the original blogger. They can use the copied site as proof they're a real person. Or it's part of a long-con social engineering project.

They could put out a legit-looking blog post that has a malicious GitHub command that installs malware, and social engineer someone into running it.