A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.

Black flag down: Microsoft has closed an activation loophole that was widely used by software pirates to run Windows and Office without a legitimate license. The group behind the activation tool has ...