Chaos — Ransomware Profile
Chaos is a ransomware-as-a-service operation that emerged in early 2025, likely formed by former BlackSuit/Royal members, offering cross-platform ransomware for Windows, Linux, ESXi, and NAS to affiliates recruited on the RAMP dark web forum, excluding CIS/BRICS countries and hospitals from targeting.Recent claimed victims
- neopharmlabs.com 2026-07-22
- issvc.com 2026-07-22
- argonautms.com 2026-07-21
- wikoff.com 2026-07-20
- radiax.com 2026-07-16
- spectrumchemical.com 2026-07-14
- aphenapharma.com 2026-07-14
- Sleeman Breweries 2026-07-14
- corepharma.com 2026-07-08
- opportune.com 2026-07-08
- Air Creebec 2026-07-06
- gisy.com 2026-07-06
- universalplant.com 2026-06-30
- Ingerman 2026-06-26
- roofdepot.com 2026-06-25
- Randa Apparel & Accessories 2026-06-23
- graymont.com 2026-06-22
- airespring.com 2026-06-09
- entransinternational.com 2026-05-28
- powerhousenow.com 2026-05-28
- sterlingindustries.com 2026-05-27
- cstindustries.com 2026-05-17
- challenge-mfg.com 2026-05-17
- fallprotect.com 2026-05-17
- wtitransport.com 2026-05-17
Vendor research
- discovered Cisco Talos