logo

Ransomware Tracker (Entry #239): Chaos v3.0

ID: 99a8d729-1211-5d45-94b6-316a5146471a

STIX ID: report--99a8d729-1211-5d45-94b6-316a5146471a

Feed Name: WatchGuard Secplicity Blog

Threat Score
65/100

Date Published: 2025-04-01

Date Updated: 2026-05-01

Author: Ryan Estes

...
...

**WatchGuard: Chaos v3.0 ransomware builder** — This entry documents the Chaos v3.0 ransomware builder (distinct from encryptors produced by it), noting it is the first Chaos iteration that actually encrypts files (AES-256-CBC) for files 1 MB or smaller while wiping larger files; it derives elements from Hidden Tear, includes tweaks and an expanded target list, and the builder ships with a decryptor generator; a decryptor for Chaos v3.0 is available via Yashma.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.