Dossier
Chaos ransomware gang
Coverage of Chaos ransomware gang in the Nexus archive.
- New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
The Chaos ransomware gang is using a new backdoor called msaRAT that routes command-and-control (C2) traffic through Chrome or Edge browsers to hide communication. The malware disguises its C2 traffic by leveraging these commonly used web browsers.