Threat actor
Chaos
Also tracked as Chaos Ransomware
Tracked by CyberSIXT since 29 Jul · RSS
2Articles, all time
0Articles, last 30 days
0CVEs exploited, attributed · all time
0Research reports, all time
Activity
Quiet for 10 weekslast report 17 Aug5 articles5 outlets
Two articles so far, 6 May to 17 Aug.
- Mon 17 Aug. DataBreaches. Chaos ransomware threatens Healthcare Highways with PHI leak.
- Wed 29 Jul. SecurityOnline. Cisco Talos finds Rust based msaRAT using Chrome for covert C2.
- Sun 10 May. Security Affairs. Backdoored PyTorch Lightning Package Drops Credential Stealer.
- Wed 6 May. The Hacker News. MuddyWater hijacks Teams to spread Chaos ransomware false flag.
- Wed 6 May. SecurityWeek. Iran-linked MuddyWater fakes Chaos ransomware in 2026 breach.
- Article naming Chaos
- Articles a day, all coverage
- Quiet time, folded
Drawn: the latest 5 of 2 articles.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 17 Aug | Article | DataBreaches | Chaos ransomware threatens Healthcare Highways with PHI leak |
| 29 Jul | Article | SecurityOnline | Cisco Talos finds Rust based msaRAT using Chrome for covert C2 |
| 10 May | Article | Security Affairs | Backdoored PyTorch Lightning Package Drops Credential Stealer |
| 6 May | Article | The Hacker News | MuddyWater hijacks Teams to spread Chaos ransomware false flag |
| 6 May | Article | SecurityWeek | Iran-linked MuddyWater fakes Chaos ransomware in 2026 breach |
CVEs exploited
No CVE is attributed to Chaos in CyberSIXT coverage.
MITRE ATT&CK techniques
No MITRE ATT&CK® techniques are recorded for Chaos.
Articles2
Drawn: the latest 5 of 2 articles.
- Backdoored PyTorch Lightning Package Drops Credential StealerSecurity Affairs