Threat actors are impersonating known brands in an ongoing, widespread campaign aimed at infecting macOS users with information stealer malware, LastPass warns. As part of the infection chain, the hackers are relying on fraudulent GitHub repositories claiming to provide macOS software from various companies and use search engine optimization (SEO) so that links to the repositories appear at the top of search pages. “In the case of LastPass, the fraudulent repositories redirected potential victims to a repository that downloads the Atomic infostealer malware,” LastPass says. LastPass identified two GitHub sites impersonating its brand, which were posted on the Microsoft-owned code-sharing platform on 16 September, and which have been taken down since. Both were posted by a user named…