Criminals are using a dangerous fake free VPN to spread malware via GitHub - here's how to stay safe

• GitHub repositories host malware disguised as tools that gamers, and privacy-seekers are likely to download
• The fake VPN campaign drops malware straight into AppData and hides it from plain view
• Process injection through MSBuild.exe allows this malware to operate without triggering obvious alarms

Security experts have warned of an emerging new cyber threat involving fake VPN software hosted on GitHub.

A report from Cyfirma outlines how malware disguises itself as a “Free VPN for PC” and lures users into downloading what is, in fact, a sophisticated dropper for the Lumma Stealer.

The same malware also appeared under the name “Minecraft Skin Changer,” targeting gamers and casual users in search of free tools.

Sophisticated ...