Phishing Report

Yesterday, I came across a Phishing account, under the username "Dev_Supports", with the official DEV.to logo. Something that should have gotten taken down by the team fast. Instead, it was allowed to comment on over 200 posts, with an external link... I report 10+ times, I posted tagging the devs, I reported to [email protected], [email protected] and they're still there. Phishing is a serious security risk and this highlights why it needs it's own report type.

Simple, new report type, for phishing/scamming and it has to be fast acting. If 5-10 people report an account/comment from that account for phishing/scamming, the account should be suspended until manually reviewed by a Mod. I help the watch for 5 hours, nobody came. People commented on my warning comments, thanking me, I asked them to report too, it had 0 effect, they're still live. It needs to work and it needs to work fast, because I dont know how many people fell victim in the time it's taking to ban the account.

I reported their account, their comments, asked people to report them too, I posted about it, tagging the dev team members, I sent emails to security@ and support@, nothing... What could also be a good idea, is a "Call on the DEVengers" tab on the left. Where you can send a message to the swarm of DEV.to team members, everyone with any capability of taking action. That way when stuff like this comes up, it's not up to who you know, you can notify the entire team and someone will take action. I think it's probably worth noting too that it'd be a good idea to expand the mod pool to cover different timezones, so there's always a set of mods on call.

This also highlights an even larger problem. Dev.to uses Sloan, people who've been around for a long time know that. New people dont... That needs to be made explicitly clear to people, that Dev.to will only contact you via Sloan, or email, or directly from the team's personal accounts.