Chaos ransomware group deploys msaRAT backdoor using browser-based C2 obfuscation

The Chaos ransomware gang has introduced a new backdoor, msaRAT, which leverages legitimate Chrome and Edge browser processes to mask command-and-control traffic. This technique complicates detection by blending malicious communications with standard web traffic, marking an evolution in the group's evasion tactics.