Chaos ransomware msaRAT hides its C2 channel inside a legitimate browser process

Iranian threat group used Chaos ransomware as a ‘false flag,’ researchers say