Tax Extension Malware Campaign Exploits Trusted GitHub Repositories to Deliver Remcos RAT

A recent phishing campaign exploited GitHub links, targeting victims with promises of tax extension assistance. The emails urged recipients to download a password-protected archive from trusted repositories associated with tax organizations.