> IT-Sentinel.com

// Cybersecurity & IT News Aggregator - Real-time Threat Intelligence Feed

NEWS CVE
← messages.back_to_articles

> Fake MAS Windows activation domain used to spread PowerShell malware

[SOURCE] BleepingComputer [AUTHOR: Bill Toulas] [DATE: 24/12/2025 17:44] [LANGUAGE: EN]
A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'. [...]
[messages.read_original_source] →