Tag: msaRAT

  • New msaRAT Malware Uses Chrome and Edge to Hide C2 Traffic

    New msaRAT Malware Uses Chrome and Edge to Hide C2 Traffic

    The Chaos ransomware group is using a new Rust-based backdoor called msaRAT to hide command-and-control traffic inside Chrome and Microsoft Edge browser activity. The msaRAT malware launches a headless browser session and uses the Chrome DevTools Protocol to communicate with attacker-controlled infrastructure. Because it routes traffic through the browser rather than connecting directly to a…