Fake MAS Windows activation domain used to spread PowerShell ...
1 day ago · A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.
The “D” is for Danger: How a Tiny Typo in MAS Activation ...
11 hours ago · Attackers are using a fake MAS domain (get.activate.win) to deploy Cosmali Loader and XWorm RAT via PowerShell. Verify your command before running it!
Fake MAS Windows Activation Domain Spreads PowerShell Malware
1 day ago · This article details a recent malware campaign targeting users of the Microsoft Activation Scripts (MAS) project, an open-source tool for activating Windows and Office. Here’s a …
Typosquatted Windows Activator Domain Distributes Malicious ...
11 hours ago · A fraudulent domain masquerading as the popular Microsoft Activation Scripts (MAS) tool is being used to infect users with a malicious PowerShell-based loader. The attackers registered the …
Typosquatting Trap: MAS Users Infected with 'Cosmali Loader'
A typosquatted domain, mimicking the legitimate Microsoft Activation Scripts (MAS) tool, is actively spreading malicious PowerShell scripts. Unsuspecting users who mistype 'get.activated.win' are ...
Data Breaches Digest: Data Breaches Digest - Week 52 2025
4 days ago · Everest Ransomware Group Breaches Accela and Notin Fake MAS Windows activation domain used to spread PowerShell malware FBI seizes domain storing bank credentials stolen from …
Faux domaine d'activation MAS Windows utilisé pour propager ...
2 days ago · Faux domaine d’activation MAS Windows utilisé pour propager des logiciels malveillants PowerShell Un domaine typosquatté usurpant l’identité de l’outil Microsoft Activation Scripts (MAS) a …