Damn,this is clever in a bad way.
I guess that having to download the software from a Github repository can raise some reg flags and more people will refuse to download it,because it doesn't look professional.
As the technological age goes by and security features tightens, hackers and scammers also upgraded their hacking schemes and styles to follow and move together with the trend so they can still do and execute their plans. They make a trojan styled website where they will make it look like a legitimate and useful so users will be convinced to use it and once they run it to their computers it will start the phishing activity.