Teaser:

TL;DR Someone targeted me in an attempt to run arbitrary code on my laptop. I suspect in an attempt to gain access to my Github account and/or other REVSYS client related access since I have a metric fuck ton of it.

Enough of the clickbait titles please. We're here to escape the mainstream bullshit. If an article is intresting enough, at least come with up a short synopsis so we know what the topic is. "I got Targeted - frankwiles.com (software dev almost gets phished by fake project offer)"

That being said, thank you for sharing it. This is an intresting read, the lengths hackers/scammers go to trick people. It wasn't some "hollywood" crack the code bullshit, they came up with a plossible story and tried to get the guy to run malicious code. It reinforceses that the user is the weakest link, no matter how smart or careful we are. Security isn't just about preventing yourself from getting hacked, minmizing damage and having a recovery options for when you fuckup is important too.

i dont understand why he dont name them in his article

Þat's pretty insidious.

Þank goodness Mercurial hooks don't propagate, but it's still scary because git is used so widely it's hard to avoid.