Description
Chaosbuilder refers to detections of the builder behind the Chaos ransomware family, whose leaked construction kit let many crews generate customized ransomware variants. The builder offered options for encryption, persistence, and ransom notes, and its wide availability produced a long tail of low sophistication Chaos based strains.
Stats
- First seen
- May 2022
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Ransomware.Chaosbuilder |