Tropic Trooper Weaponizes GitHub and VS Code for East Asian Espionage

Zscaler ThreatLabz uncovered a Tropic Trooper espionage campaign distributing a trojanized SumatraPDF executable (using the TOSHIS loader) that displays a decoy PDF while loading an AdaptixC2 Beacon from GitHub; attackers use GitHub Issues for C2 and establish persistent remote access via VS Code tunnels, with infrastructure and tooling consistent with prior Tropic Trooper operations.