Chaos Ransomware Threat Actors Impersonating IT Support and Using Artificial Intelligence Tools

Other | 08/25/2026

The Federal Bureau of Investigation (FBI} is releasing th is FLASH to disseminate Indicators of Compromise (IOCs} and tactics, techniques, and procedures (TTPs} associated with the Chaos ransomware variant, the successor to the Royal/Blacksuit variants. Chaos threat actors (TAs} have attacked multiple businesses, primarily in the United States, using social engineering, open-source tools, phishing, and Artificial Intelligence (Al} tools to establish access points and carry out ransomware activities. The FBI provides this information to raise awareness of the Chaos ransomware variant and to provide IOCs and TTPs for recipients' research and network defense.

To read more, please log in