A recent phishing attack on GitHub

A couple weeks ago, I spotted a phishing campaign targeting developers on GitHub - actually, my coworker Max tapped me on the shoulder to show me. Phishing is nothing new, but this one caught my attention with the tactics, plus recent current events. The attack used GitHub’s own features This was a clever social engineering attempt to reach open-source maintainers. In one form, it looked like…