dev.to hit by phishing comments posing as "DEV Support"

A phishing campaign is spreading on dev.to: bots post comments posing as "DEV Support" demanding account verification within 12 hours via a shortened link. The messages arrive 38–79 seconds after a post goes live and lead to a fake login page.

• Comments arrive 38–79 seconds after a post is published
• Links point to shorteners and domains like anti-bot[.]icu
• Cyrillic lookalike letters are used to bypass spam filters
• The goal is stealing credentials on a fake dev.to login page