A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.

Khaberni - Recent security reports have revealed the exploitation of a fake electronic domain, very similar to the domain of the famous Microsoft Activation Scripts (MAS) tool, to spread malware.

Windows PowerShell is a utility that lets you automate Windows features including activation of the operating system. You must activate Windows with a valid license before all Windows features are ...