Microsoft has uncovered a malvertising campaign that redirected users to information stealers hosted on GitHub.