New phishing attack:

1. Someone created a GitHub user with human name "GitHub Security Account".
2. They filed a GitHub issue that says "suspicous login, click her to reset your password"
3. Email (kinda) looks like it is official GitHub notification cause it comes from GitHub address.

0

If you have a fediverse account, you can quote this note from your own instance. Search https://hachyderm.io/users/itamarst/statuses/114172325252700725 on your instance and quote it. (Note that quoting is not supported in Mastodon.)