■■■■□ 4️⃣ GitHub repositories host malware disguised as tools that gamers, and privacy-seekers are likely to download.
The fake VPN 🧠 campaign drops malware straight into AppData and hides it from plain view
Process injection through MSBuild.exe allows this malware to operate without triggering obvious alarms.
https://www.techradar.com/pro/criminals-are-using-a-dangerous-fake-free-vpn-to-spread-malware-via-github-heres-how-to-stay-safe