Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

Reported 23 Jul 2026 by otx · Severity: medium

Cisco Talos discovered msaRAT, a new Rust-based remote access trojan attributed to the Chaos ransomware group. This sophisticated RAT never directly touches the network, instead controlling command-and-control communications exclusively through Chrome DevTools Protocol (CDP). It