HIGHRansomware
Global

Hacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges

·Source: Infosecurity Magazine

Updated:

Executive Summary

An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation

Analysis

An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation
Source Attribution

Originally published by Infosecurity Magazine on Jul 13, 2026.

Related Threats

HIGHRansomware

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, found on a compromised Windows machine ahead of the encryptor. The implant never opens an outbound connection of its own. Its process talks to 127.0.0.1 and nothing else. It starts Chrome or Edge in headless mode and drives the browser

The Hacker News
HIGHRansomware

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over TURN.

Cisco Talos
HIGHRansomware

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers. [...]

BleepingComputer