Threat groups created a fake security company, High Sierra, with faux exploits and fake profiles for security researchers on GitHub and elsewhere, aiming to get targets to install their malware.