Comment by koeliga

This a known method now of social engineering. See this post from last year: https://news.ycombinator.com/item?id=45591707

Still crazy tho that one dev's compromised device could withdraw 6 billion...