I was recently contacted by an account claiming to be CEO of Scoil_App. I did some due diligence and here’s what I found from their own docs and from a CrowdStrike‑owned malware analysis platform’s public blog. Make your own judgment, this is not a legal accusation.

According to its own docs, “Scoil” is a social networking app built on the Blast blockchain, with decentralized identity and token rewards for posting, engagement, referrals, etc. On paper, it sounds like a typical Web3 social project.

When I dug deeper, I found a threat‑intel write‑up from Hybrid Analysis about an organized group targeting Web3 users with fake apps. (Towards the bottom in Mapping the infrastructure)
https://hybrid-analysis.blogspot.com/2026/01/organized-traffer-gang-on-rise.html

In that report, they list “AppScoil (X)” and “ScoilApp (GitHub, GitBook, linktree)” as part of the infrastructure around a malware campaign.

I also found a blog post from a developer who was approached in a very similar way: praised their hackathon project, offered a role and salary, then pushed them to install a custom “meeting” app that looked shady.
https://note.com/moodai0119/n/n970dfd48a377

They ultimately decided it was likely a scam attempt and documented everything.

To be clear I am not saying everyone behind any “Scoil” account is definitely malicious. I’m not making legal claims about specific people. I’m just sharing what I found so you can decide for yourself and be careful with unsolicited offers + custom downloads.

Here is my general advice. Be wary of cold DMs offering quick money or roles. Don’t install random DMGs/EXEs just to “join a meeting”. Keep your main wallet machine as clean and boring as possible

Stay safe out there everyone 💪

#CryptoSecurity #Web3Security #StaySafe #SecurityAwareness

Original article on BULB