OS users are being tricked in the ongoing campaign with fake GitHub pages that deliver the Atomic infostealer.
The stealer campaign has evolved into a multi-stage delivery chain that ultimately deploys the modular, feature-rich PureRAT.