Skip to main content
Holiday Sale — Get 40% off Vantage for yourself or as a gift
Get Started
SubscribeLogin
Published • loading... • Updated

Fake MAS Windows activation domain used to spread PowerShell malware

Summary by BleepingComputer
A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.

1 Articles

BleepingComputerBleepingComputer
Center

Fake MAS Windows activation domain used to spread PowerShell malware

A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.

Read Full Article
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 100% of the sources are Center
100% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

BleepingComputer broke the news in on Wednesday, December 24, 2025.
Too Big Arrow Icon
Sources are mostly out of (0)
Blindspot Title And Logo
Stories disproportionately reported by the Left or the Right

Similar News Topics

Cyberattacks icon

Cyberattacks

Windows icon

Windows

United States icon

United States

Cybersecurity icon

Cybersecurity

News
Feed Dots Icon
For You
Search Icon
SearchBlindspot LogoBlindspotLocal