Yeah, that's a fairly common thing lately.
Example: there's someone going around sending DMs to people saying things like "oh, I've got a cool new WIP game I'm working on, here, have a link and try it out!" and the link LOOKS like a game, but when you run it, it scours your computer for login info and such and they use that to steal whatever they want, drain bank accounts, etc.
