New Rust Malware "ChaosBot" Leverages Discord for Stealthy Command and Control

**Executive summary:** ChaosBot is a sophisticated Rust-based backdoor that leverages Discord API tokens and per-victim Discord channels for covert C2, enabling interactive PowerShell-based shell commands, file download/upload, and screenshot exfiltration; initial access observed includes compromised Cisco VPN and an over-privileged AD service account, DLL side-loading, and decoy .lnk phishing, while evasion employs ETW patching and VM MAC checks—recommendations include MFA, WMI restrictions, application whitelisting, and monitoring for Discord API traffic.