172[.]86[.]126[.]18

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel