Fake MAS Windows activation domain used to spread PowerShell malware
From BleepingComputer to All on Wed Dec 24 18:10:41 2025
A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'. [...]