Fake MAS Domain Distributes PowerShell Malware
TL;DR Summary
A malicious domain mimicking Microsoft's MAS tool was used to spread Cosmali Loader malware via PowerShell, exploiting user typos to infect Windows systems with cryptomining and RAT malware. Users are advised to verify commands and avoid executing untrusted remote code to prevent infection.
Fake MAS Windows activation domain used to spread PowerShell malware BleepingComputer
Reading Insights
Total Reads
0
Unique Readers
0
Time Saved
2 min
vs 3 min read
Condensed
90%
434 → 43 words
Want the full story? Read the original article
Read on BleepingComputer