Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Chaos

| Active | RaaS

Chaos is a ransomware-as-a-service operation that emerged in early 2025, likely formed by former BlackSuit/Royal members, offering cross-platform ransomware for Windows, Linux, ESXi, and NAS to affiliates recruited on the RAMP dark web forum, excluding CIS/BRICS countries and hospitals from targeting.
External information

Victims
49
 
First Discovered
2025-03-31
victim
Last Discovered
2026-05-04
victim
Inactive Since
10
days
Avg Delay
270.3
days
Infostealer
53.1%
victims with domain
Countries
10
hit
View Victims on World Map View Group Statistics
Attack Velocity — Last 12 months
-33% vs last month

Known Locations (1)
Favicon Title Type Available Last Visit Server Info FQDN
favicon CHAOS — Not found Yes 2026-05-14T21:38:43 NGINX nginx hptqq2o2qjva7lcaaq67w36jihzivkaitkexorauw7b2yul2z6zozpqd.onion

Target
Top 5 Activity Sectors
  • Technology 13
  • Manufacturing 7
  • Business Services 6
  • Financial Services 6
  • Consumer Services 4
Top 5 Countries
  • US flag United States 38
  • DE flag Germany 3
  • MX flag Mexico 1
  • GB flag United Kingdom 1
  • IT flag Italy 1

Heatmap

YARA Rules (1)

Indicators of Compromise (IoCs) (9)
Hash MD5 3 Hash SHA256 3 IP Address 3
Type IOC
Hash MD5 160f60dc3fc9920cfc3847de4de2ef09
Hash MD5 87fd821b67a1f329548f222d81a55be7
Hash MD5 9113f4b245da32c75d61b467ee89e0b7
Hash SHA256 11cfea4100ba3731d859148d2011c7225d337db22797f7e111c0f2876e986490
Hash SHA256 1d846592ffcc19ed03a34316520aa31369218a88afa4e17ac547686d0348aa5b
Hash SHA256 7c4b465159e1c7dbbe67f0eeb3f58de1caba293999a49843a0818480f05be14e
IP Address 107.170.35.225
IP Address 144.172.103.42
IP Address 45.61.134.36

Victims (49)
Logo
Discovered: 2026-05-04 (10d ago)
If the company's management does not reach an agreement with us within 4 days, we will publish 250 G…
Logo
Discovered: 2026-05-04 (10d ago)
If the company's management does not contact us within 24 hours, we will publish 540 GB of the compa…
Logo
Discovered: 2026-04-28 (16d ago)
Company management has 48 hours to reach an agreement with us. If no agreement is reached, the files…
Logo
Discovered: 2026-04-22 (22d ago)  ·  Attack est.: 2025-02-19
The company is disregarding its customers' data. If a deal is not reached within 48 hours, the files…
Logo
Discovered: 2026-04-20 (23d ago)  ·  Attack est.: 2025-02-19
If the company does not contact us within 48 hours, the files will be published. Polycorp is a priv…
Logo
Discovered: 2026-04-14 (1mo ago)
It offers refrigerators, freezers, wall ovens, washers, and electric ranges.…
Logo
Discovered: 2026-04-14 (1mo ago)
Founded in 1983, ITC Construction Group is a Commercial and Residential Construction company that sp…
Logo
Discovered: 2026-03-27 (1mo ago)
KDM P.O.P. Solutions Group, headquartered in Cincinnati, Ohio, with additional facilities in Cincinn…
Logo
Discovered: 2026-03-20 (1mo ago)  ·  Attack est.: 2025-02-19
Smyth Companies, LLC has failed to protect its infrastructure. We have successfully exfiltrated high…
Logo
Discovered: 2026-03-18 (1mo ago)  ·  Attack est.: 2025-02-19
We provided the management of Loop Capital with ample time and opportunity to protect their clients,…
Logo
Discovered: 2026-03-12 (2mo ago)
We are announcing a major security breach and data exfiltration from Flad Architects, a leading nati…
Logo
Discovered: 2026-03-07 (2mo ago)  ·  Attack est.: 2025-02-19
Crescent is a growth-oriented U.S. independent energy company engaged in the acquisition, developmen…
Logo
Discovered: 2026-03-06 (2mo ago)
NELSON Worldwide is an award-winning firm delivering architecture, interior design, graphic design, …
Logo
Discovered: 2026-02-26 (2mo ago)  ·  Attack est.: 2025-02-19
Northern Technologies International Corporation (NTIC) is a specialty chemical company that develops…
Logo
Discovered: 2026-02-26 (2mo ago)
The company was founded in 2005 and is based in Sarasota, Florida. Miles Partnership offers destinat…
Logo
Discovered: 2026-02-09 (3mo ago)  ·  Attack est.: 2025-02-19
Official Announcement: Horizon Media Data Breach ULTIMATUM: Horizon Media has 48 hours to reach an …
Logo
Discovered: 2026-01-29 (3mo ago)  ·  Attack est.: 2025-02-19
Founded in 1965 and headquartered in New Albany, Ohio, Anomatic is a full-service manufacturer of an…
Logo
Discovered: 2026-01-05 (4mo ago)
CEIVA is the inventor of the world's first connected digital photo frame, offering a full line of di…
Logo
Discovered: 2025-12-26 (4mo ago)
Veplastic makes high-quality plastic compounds for manufacturers across Italy and Europe.…
Logo
Discovered: 2025-12-24 (4mo ago)  ·  Attack est.: 2025-02-19
Amsinos superior quality and technological advancements have gained the trust of healthcare professi…
Logo
Discovered: 2025-12-11 (5mo ago)
NSE Insurance Agencies, Inc. is an independent insurance agency established in 1912, providing a com…
Logo
Discovered: 2025-12-08 (5mo ago)
B2BE provides a comprehensive suite of supply chain management solutions designed to enhance visibil…
Logo
Discovered: 2025-12-08 (5mo ago)
Founded in 2010, ThinkMarkets is a multi-asset online brokerage with headquarters in London and Melb…
Logo
Discovered: 2025-12-02 (5mo ago)
Since it's foundation in 1954, Kurt J. Lesker Company has manufactured and sold vacuum equipment and…
Logo
Discovered: 2025-12-02 (5mo ago)
Founded in 2001, Dakkota Integrated Systems is a manufacturing company that provides a variety of bu…
Logo
Discovered: 2025-11-23 (5mo ago)
mToilet is a company that operates in the Sporting & Recreational Equipment Retail industry.…
Logo
Discovered: 2025-11-13 (6mo ago)
Metropolitan Adjustment Bureau is a public insurance adjusting firm with over 50 years of experience…
Logo
Discovered: 2025-11-12 (6mo ago)
ICON International, Inc. is a corporate barter firm that offers innovative solutions and strategic t…
Logo
Discovered: 2025-10-28 (6mo ago)
DeCeTe Duisburger Container-Terminalgesellschaft mbH…
Logo
Discovered: 2025-10-24 (6mo ago)  ·  Attack est.: 2025-02-19
Hanson Professional Services Inc. is a national consulting firm that specializes in engineering, pla…
Logo
Discovered: 2025-10-09 (7mo ago)  ·  Attack est.: 2025-02-19
Founded in 1996, MSS Solutions is a full-service Mechanical Contractor offering Design-Build, Design…
Logo
Discovered: 2025-10-07 (7mo ago)
EBA Engineering is a multidisciplinary engineering firm focused on providing exceptional, client-cen…
Logo
Discovered: 2025-10-07 (7mo ago)  ·  Attack est.: 2025-02-26
$738.9 Million | Gas Stations, Convenience & Liquor Stores Retail…
Logo
Discovered: 2025-10-07 (7mo ago)
indie offers highly innovative automotive semiconductors and software solutions for Advanced Driver …
Logo
Discovered: 2025-10-07 (7mo ago)
Founded in 1952 and headquartered in Rogers, Minnesota, Archway is a provider of marketing logistics…
Logo
Discovered: 2025-10-07 (7mo ago)
Since 1957, Autohaus Malin has been a proud partner of the Renault brand and, since 2006, a partner …
Logo
Discovered: 2025-09-24 (7mo ago)
AMS Fulfillment is a leading full-service order fulfillment company operating as a third-party resou…
Logo
Discovered: 2025-09-01 (8mo ago)
Ellison-Mills Contracting is a family-oriented company specializing in wet utility and roadway infra…
Logo
Discovered: 2025-08-27 (8mo ago)
Dafo is a market leader in extinguishing systems for vehicles…
Logo
Discovered: 2025-06-06 (11mo ago)
Operating in the state of California, Optima Tax Relief LLC provides consulting services. The compan…
Logo
Discovered: 2025-06-05 (11mo ago)
The Veethree Group is an alliance of companies, driven by common technologies and innovation. Today …
Logo
Discovered: 2025-06-05 (11mo ago)  ·  Attack est.: 2025-02-19
Started in 1969 and headquartered in Memphis, Tennessee, Barnhart is a heavy lift and heavy transpor…
Logo
Discovered: 2025-05-27 (11mo ago)
Data will be released soon. The Salvation Army, established in 1865, has been offering an array of …
Logo
Discovered: 2025-04-15 (1y ago)  ·  Attack est.: 2025-02-19
904.6 Million | Commercial & Residential Construction IES Communications, LLC (Integrated Electrical…
Logo
Discovered: 2025-04-08 (1y ago)  ·  Attack est.: 2025-02-19
Food & Beverage | 341.1 Million Founded in 1912, Farmer Brothers is a national coffee roaster, whole…
Logo
Discovered: 2025-03-31 (1y ago)  ·  Attack est.: 2025-03-15
Goosehead Insurance, Inc. operates as a holding company for Goosehead Financial, LLC that engages in…
Logo
Discovered: 2025-03-31 (1y ago)
PAK Technologies was established in 1980 in Milwaukee, WI. We began selling cleaners and restoration…
Logo
Discovered: 2025-03-31 (1y ago)
Founded in 1929, Evans Distribution Systems is a provider of complete supply chain solutions includi…
Logo
Discovered: 2025-03-31 (1y ago)
Founded in 1939 and headquartered in Nashville, Tennessee, TransCore is a company that provides digi…