Fake MAS Windows activation domain used to spread PowerShell malware

Published on December 24, 2025

A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'. [...]

Continue reading on website
Other news

New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

December 24, 2025
Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that's delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple's Gatekeeper checks."Unlike earlier MacSync Stealer variants that primarily rely on drag-to-terminal or ClickFix-style techniques, this sample adopts a more

OpenAI is reportedly testing Claude-like Skills for ChatGPT

December 24, 2025
OpenAI is testing a new ChatGPT feature called "Skills," which will be similar to Claude's feature, also called Skills. [...]