RansomwareChaos ransomware crew hides its remote control tool inside your own browser
A new backdoor called msaRAT launches Chrome or Edge in the background and pipes attacker commands through it, so no direct link to the criminal server ever appears on the network.
