logo

Ransomware Tracker (Entry #238): Chaos v2.0

ID: 3d1b45e3-a661-55cd-99e7-2aed3fa03ac7

STIX ID: report--3d1b45e3-a661-55cd-99e7-2aed3fa03ac7

Feed Name: WatchGuard Secplicity Blog

Threat Score
65/100

Date Published: 2025-04-01

Date Updated: 2026-05-01

Author: Ryan Estes

...
...

WatchGuard's entry documents the Chaos v2.0 Ransomware Builder (a wiper-focused builder), noting it overwrites files with random data and differs from v1.0 by renaming the product, explicitly presenting itself as a wiper, allowing customization of ransom note filename, and offering advanced options such as delayed execution, enforced administrative execution, deletion of shadow copies and backup files, and tuning of the random-data generation used for wiping.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.