A Phishing Trip Gone Wrong: My Upwork Phishing Encounter

When it comes to freelancing, the benefits come with a package of those which are hidden in the lines and can blindside one. Along this article, I will share a very personal experience that went from being quite scary as they ended up being a phishing attempt that nearly caught me off the hook but did not land its victim.

All of this started from an offer that was just too good to be true.

It was yet another freelance opportunity. The new Upwork client sent me a message offering something that seemed good:

40 hours per week
$10 per hour

These terms sounded amazing. I accepted the contract, then went straight to work, prepared to take the project head-on. But things took a quick, weird turn.

The Mysterious Zip Folder
He was the one who told me that the details of the project are within a zip folder with a password. He said he is going to send it via WeTransfer and asked me to give my email address so he can deliver the file there. Everything seems routine-until I opened the file.

Where was this zip folder that contained an .exe file? Instead of an MS PowerPoint presentation or a Word document, there was this zip folder containing an .exe file. Well, my instincts just immediately kicked in. An executable file? That is not what I was expecting for a standard freelance project.

A Gut Feeling—and a Red Flag
I messaged the client and asked for clarification:
“Why is this an executable file? Shouldn’t it be a document or something?”
“Just open it. The video instructions I sent explain everything.”

Curious but cautious, I watched the video—and there it was. The instructions demonstrated a hacking activity in process. This wasn’t just a mistake; the whole point of this person was for me to unknowingly run malicious software that could cause extreme damage.

Dodging the Hook: Trusting Instincts Over Temptation
Of course, I am thankful that I was warned because I didn’t open the mailer. Who knows what could have happened if I had? From keyloggers and ransomware to anything worse, the potential consequences would have been catastrophic—both for my computer and for my reputation at work.

The experience taught me an important lesson: No dollar in the world is worth sacrificing your safety. Even when the deal sounds too good to be true, one has to remain vigilant and ask questions.

Lessons to Freelancers
1. Trust your instincts. If it feels off, then likely it is.
2. Never open any suspicious files. Especially .exe files or anything other than something you expected.
3. Verify project details in the early stages. A legitimate client never has any qualms in describing processes succinctly.
4. Limit exposure to personal data while staying within the boundaries of the platform. Definitely don’t share until it becomes absolutely necessary.
5. Always report suspicious activity. Upwork and all such platforms have their own ways of dealing with scam reports.

Conclusion
This was a near miss but taught me a valuable lesson about freelancing: Not every opportunity is what it appears to be, and it is very important to keep your guard up against those lurking scams in the dark.

For all my fellow freelancers out there, stay safe, trust your gut, and always be on the lookout for red flags. After all, not every fishing expedition ends with a good catch.