> Fake MAS Windows activation domain used to spread PowerShell malware
[AUTHOR: Bill Toulas]
[DATE: 24/12/2025 17:44]
[LANGUAGE: EN]
A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'. [...]