Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
- Posted on July 23, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
Chaos-linked msaRAT drives headless Chrome or Edge over CDP, relaying encrypted C2 through Twilio TURN while its own process stays on loopback.
