Precursor Intelligence

Threat News

Latest cyber threat intelligence, breaches and exploitation

2 matching stories

Chaos Ransomware
  • Threat Actor Activity25d ago·4 sources

    MuddyWater Disguises Chaos Ransomware as Decoy in Microsoft Teams Vishing Attacks

    MuddyWater used Chaos ransomware as a decoy in a Microsoft Teams vishing campaign to harvest credentials, establish persistence, and exfiltrate data before attempting extortion, per Rapid7's May 2026 analysis.

    MuddyWaterChaos RansomwareMicrosoft Teams+2
    MuddyWater Disguises Chaos Ransomware as Decoy in Microsoft Teams Vishing Attacks
  • Threat Actor Activity2 Sept 2026·8 sources

    MuddyWater Disguises Espionage Campaign as Chaos Ransomware

    MuddyWater used Chaos ransomware branding to mask a state-sponsored espionage operation that included credential theft, data exfiltration, and a leak-site entry, with initial access delivered through Microsoft Teams social engineering.

    MuddyWaterChaos RansomwareRapid7+2
    MuddyWater Disguises Espionage Campaign as Chaos Ransomware