Fake MAS Windows activation domain used to spread PowerShell malware

A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.
Khaberni

The One-Letter Trick.. A Fake Domain Spreading Malware to Activate Windows

Khaberni - Recent security reports have revealed the exploitation of a fake electronic domain, very similar to the domain of ...
XDA Developers on MSN

6 PowerShell commands for troubleshooting Windows problems

PowerShell has taken the Windows command line to the next level. It’s not just for automating admin tasks, but also for ...