The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers. [...]
New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
Summary + source link. No paywalls, no tracking.