LastPass Discovers New Infostealer Variant Disguised as GitHub Repositories

LastPass discovered a new infostealer variant that disguises itself as GitHub repositories to trick victims into downloading malicious software. The infostealer uses signatures from Microsoft's Hardware Compatibility Program to appear legitimate. Fake GitHub repositories are being used as the distribution method to lure potential victims into downloading the malware.