INCIDENT EVIDENCE GRAPH

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

2026-07-23T10:00:00Z

The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers. [...]

• Actor: Chaos ransomware gang
• Method: Routing C2 traffic through Chrome/Edge browsers

Primary evidence

1. New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

中文