Cybercriminals are using GitHub to spread malware disguised as a free VPN download, tricking users into installing Lumma Stealer malware. Security researchers at Cyfirma uncovered the campaign, which delivered malware labeled as “Free VPN for PC” via a public GitHub repository. Once installed, the file deployed Lumma Stealer, a known info-stealing malware. The campaign also…