CHAOS Ransomware Group Targets American Firms

CHAOS is an active and evolving ransomware group that has claimed responsibility for attacks on multiple U.S. companies; the report details the malware's AES/RSA encryption of small files and partial corruption of large files, persistence techniques (including deletion of shadow copies and disabling recovery), targeted file types, double-extortion and data-tampering tactics, and common intrusion vectors (phishing, exploited vulnerabilities, social engineering), and provides mitigation recommendations such as patching, behavioral analytics, offline backups, and employee training.