This new phishing strategy utilizes GitHub comments to distribute malware
Cybercriminals exploit trusted GitHub repositories in sophisticated phishing campaigns, embedding malware into legitimate repositories associated with tax organizations.