A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.
A group of developers who call themselves Massgrave have successfully hacked Microsoft's activation tools for Windows and Office. The collective has uploaded a set of PowerShell scripts to their ...
typosquatting using names that are very similar to the domains used for activation in Microsoft Activation Scripts (MAS), an open-source tool that can activate licenses for Windows and Microsoft ...