CLEVER 'GITHUB SCANNER' CAMPAIGN ABUSING REPOS TO PUSH MALWARE

Summary from the TLDR InfoSec newsletter

A sneaky campaign on GitHub is tricking users into visiting a fake domain and installing Windows malware by falsely reporting security vulnerabilities. Users are receiving convincing email alerts from legitimate GitHub addresses, leading to the spread of malicious software. Threat actors are using GitHub's "Issues" feature to distribute malware through open-source repositories, highlighting the platform's vulnerability to abuse.