Product
Microsoft Activation Scripts
- First Reported
- Oct 22, 2026
- Latest Reported
- Oct 22, 2026
Reported Context (1)
- campaign that used fake websites impersonating the Chocolatey package manager and the Microsoft Activation Scripts (MAS) tool to distribute a Python-based malware family we track as Armorsteal. The fake SEO Poisoning Campaign Uses Fake Chocolatey and MAS Sites to Deliver Armorsteal
Malware (1)
MITRE ATT&CK (15)
Products (3)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.