Infobay Reviews 

Scammers now move to LinkedIn, do not trust them

This company (formerly edugorilla.org, now operating as infobay.ai) is running an elaborate and highly dangerous scam targeting software engineers.

What Happened:

I was contacted by someone claiming to represent their team about an "LLM training opportunity" using high-quality developer code. We connected on WhatsApp, where the individual was extremely pushy – aggressively insisting on a phone call.

During the call, they instructed me to run a Python script that would supposedly "create metadata" from my private repositories. The script was presented as harmless analysis tooling for their AI training pipeline.

The Reality:

When I properly analyzed the script, I discovered it was actually a sophisticated information stealer. Here's what it was designed to steal:

🔑 GitHub/GitLab/Bitbucket tokens – Full access to your private repositories
☁️ AWS access keys and cloud credentials – Complete cloud infrastructure access
🔐 Database connection strings – Including production database credentials
🛡️ Private cryptographic keys – SSH keys, encryption certificates
💼 Corporate secrets – Hardcoded passwords, API keys for Stripe, Slack, Twilio, and more
👤 Developer identities – Full contributor lists, email addresses, organizational structure

Why This Is Particularly Dangerous:

The script doesn't just scan your code – it actively extracts and exfiltrates sensitive credentials to structured reports designed for easy theft. If executed, attackers would gain:
Access to ALL your private repositories
Your cloud infrastructure (AWS, GCP, Azure)
Your production databases
Your CI/CD pipelines and deployment keys