Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge
The implant never opens an outbound connection of its own. Its process talks to 127.0.0.1 and nothing else. It starts Chrome or Edge in headless mode and drives the browser
Recent Comments