Skip to content
Auto-CTI
Back to all actors

Chaos ransomware gang

Unknown Dormant
Mentions
1
First seen
23 Jul 2026
Last seen
23 Jul 2026

Relevant to you · Affects your stack

Technology:
Microsoft Remote Desktop Gateway
Threat focus:
ransomware
Sector / region:
Manufacturing

Origin

Unattributed

Profile

The Chaos ransomware gang is a threat actor recently linked to the msaRAT malware. This malware uses Chrome and Edge browsers to route C2 traffic. msaRAT enables attackers to gain remote access and steal data. Further details on targets are currently unknown.

Affected vendors

MicrosoftGoogle

Associated malware / tools

msaRAT

Related actors

Share a CVE, technique or malware with this actor.

Activity (8 weeks)

31
32
33
34
35
36
37
38

Recent activity

ESC