McAfee Discovers New Phishing Campaign Targeting GitHub Users

McAfee researchers warn of a phishing campaign targeting GitHub contributors that uses fake CAPTCHA pages to convince users to press Windows+R and paste a clipboard-copied malicious script, allowing the ClickFix infection chain to execute malware; the report describes the attack flow and provides mitigation recommendations including user training, updated antivirus, email filtering, and disabling clipboard-based script execution.