Fake MAS Windows activation domain used to spread PowerShell malware Post author:Brian Post published: December 24, 2025 Post category:Uncategorized Post comments:0 Comments A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the ‘Cosmali Loader’. […] You Might Also Like Toronto Zoo shares update on last year’s ransomware attack March 5, 2025 Serbian police used Cellebrite zero-day hack to unlock Android phones February 28, 2025 Fake CrowdStrike repair manual pushes new infostealer malware July 23, 2024 Leave a Reply Cancel replyCommentEnter your name or username to comment Enter your email address to comment Enter your website URL (optional) Save my name, email, and website in this browser for the next time I comment.