Chaos
Also known as: FakeRyuk, RyukJoke, Yashma
In-development ransomware family which was released in June 2021 by an unknown threat actor. The builder initially claimed to be a "Ryuk .Net Ransomware Builder" even though it was completely unrelated to the Ryuk malware family. Presently it appears to contain trojan-like features, but lacks features commonly found in ransomware such as data exfiltration.
C2 Infrastructure
Last 7 days
| Date | C2 Hosts |
|---|---|
| Mar 18, 2026 | 1 |
Further Reading
Chaos Unleashed: a Technical Analysis of a Novel Ransomware. This report provides a comprehensive overview of Chaos v4.
A new ransomware is taking the unusual approach of selling its decryptor on the Roblox gaming platform using the service's in-game Robux currency.
Since June 2021, we’ve been monitoring an in-development ransomware builder called Chaos, which is being offered for testing on an underground forum.