Chaos Ransomware and msaRAT: How Attackers Hide C2 Traffic in Headless Browsers
A new analysis shows the Chaos ransomware group routing command-and-control traffic through headless Chrome and Edge using a Rust implant called msaRAT, raising the bar for defenders.