tgsan/ cmwtat_digital_edition
View on GitHubCloudMoe Windows 10/11 Activation Toolkit get digital license, the best open source Win 10/11 activator in GitHub. GitHub 上最棒的开源 Win10/Win11 数字权利(数字许可证)激活工具!
CloudMoe Windows 10/11 Activation Toolkit get digital license, the best open source Win 10/11 activator in GitHub. GitHub 上最棒的开源 Win10/Win11 数字权利(数字许可证)激活工具!
[!CAUTION]
Security Announcement
The CMWTAT website has now restored its legitimate download links. However,
cmwtat.cloudmoe.comwas previously compromised, and the download links to the Alibaba Cloud and Amazon Cloud mirrors were replaced with ZIP files containing malicious.msiinstallers. Downloads from GitHub Releases are not confirmed to be affected by this incident.According to my investigation, the attacker had been scanning the server for some time, and the actual intrusion most likely began on the evening of August 10, 2026. The exact time when the malware was uploaded is still under investigation. The file timestamps on the server were also falsified to show dates in 2025.
A normal CMWTAT download should be a standalone
.exefile, or a ZIP archive containing only one.exefile. If a ZIP archive contains an.msifile, do not run it.If you have already run a suspicious file, immediately perform a full scan with up-to-date antivirus software, back up your important data, and reinstall the operating system if possible. Deleting CMWTAT will not affect an activation that has already been completed, and the system will activate automatically after reinstallation.
Thanks to @efojug for reporting this issue in Issue #115.
I sincerely apologize for the inconvenience and risks caused by this incident. I will continue investigating the details of the attack and take greater care to ensure the security of the server, in order to prevent similar incidents from happening again.
安全公告
目前 CMWTAT 官网已经恢复正常的下载链接。但此前
cmwtat.cloudmoe.com官网曾遭到入侵,官网指向阿里云、亚马逊云的下载链接被替换为包含恶意.msi安装包的 ZIP 文件。GitHub Releases 下载不在本次已确认的受影响范围内。根据调查,攻击者此前已进行服务器扫描,正式入侵很可能始于 2026 年 8 月 10 日傍晚;具体挂马时间仍在调查,服务器文件时间戳也曾被伪造为 2025 年。
CMWTAT 正常下载应为单独的
.exe,或 ZIP 内仅包含一个.exe。如果 ZIP 内含.msi,请勿运行。若已运行可疑文件,请立即使用杀毒软件全盘查杀、备份重要资料,并在条件允许时重装系统。CMWTAT 被删除不会影响已完成的激活,重装后系统将自动激活。
感谢 @efojug 在 Issue #115 中提供报告。
对由此造成的困扰和风险,我深表歉意。我将持续调查攻击细节,并更加认真地保障服务器安全,避免类似事件再次发生。
This toolkit can activate your Windows 10 and Windows 11 use digital license.
此工具可以使用数字权利激活您的 Windows 10 和 Windows 11。
A Windows 10 and Windows 11 digital license activation tool written in CSharp.
一款使用CSharp编写的 Windows 10 和 Windows 11 数字权利激活工具。

https://github.com/TGSAN/CMWTAT_Digital_Edition/graphs/contributors
No comments yet. Set the tone — say what you would want to know.