Collateral Damage: Microsoft Defender Blocks Official MAS Script in Malware War

Microsoft Defender is reportedly blocking the legitimate Microsoft Activation Scripts (MAS) because it is conflating the genuine domain `get.activated.win` with a malicious lookalike `get.activate.win` used to distribute PowerShell-based malware; Defender flags the activity as `Trojan:PowerShell/FakeMas.DA!MTB`. The report warns that users should not disable security protections to run activation commands, as doing so could allow the phishing/malicious script to execute and lead to compromise.