A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.

To begin, you’ll need to download the Activate-ProductOnline.ps1 script and save it to a local folder. This script will install and activate the ESU product key ...