The virus, MSH/Cibyz, targets Windows PowerShell. It was released last week by the RRLF virus group. PowerShell is a command-line shell and task-based scripting technology that provides control and ...
A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'.
Fake IT support sites promote malicious PowerShell "fixes" for common Windows errors, like the 0x80070643 error, to infect devices with information-stealing malware. First discovered by eSentire's ...