Chaos Ransomware's C++ Variant Deletes, Steals Crypto

A new C++ variant of Chaos ransomware has been identified, marking a significant evolution from its previous .NET versions. This updated malware employs a destructive strategy, encrypting small files, skipping medium ones, and permanently deleting the content of large files. It introduces a novel clipboard hijacking feature designed to steal cryptocurrency by replacing wallet addresses copied by the user. The ransomware masquerades as a system utility to trick users while silently executing its payload. This shift in tactics indicates Chaos is becoming more of a destructive wiper, prioritizing speed and irreversible data loss over traditional encryption.