Last week I noticed an unexpected token drop in one of my wallets, and confirmed on TzKT thousands of wallets received 18,000 of these $kdao.app tokens:
https://tzkt.io/KT1TpzrtbwUe8yYxRzMorLo2iEdgwWjQAaSY/tokens/0/transfers
Looks completely unrelated to the actual kolibri-dao token which was minted years ago and used for governance on that platform. (Is that even still in use?)
The TzKT team quickly applied a possible scam warning to the associated account, which has identified itself as "Kolibri DAO." The account refers people to https://kdao[.]app (domain obscured for safety) which formerly hosted a page resembling kolibri.finance with a "link your wallet" button prominently featured.