Chaos Ransomware Evades Detection by Routing Traffic Through Headless Browsers
The Chaos ransomware is now using a remote access tool called msaRAT to route its command-and-control traffic through headless instances of Chrome and Edge browsers. This technique helps the malware blend in with legitimate web traffic, making it harder for security systems to detect and block malicious communications. It highlights the evolving sophistication of ransomware operations.