MALWARE FAMILY
Chaos
Internal ID: elf.chaos
Last seen:Mar 17, 2026
Intelligence Profile
Multi-functional malware written in Go, targeting both Linux and Windows, evolved from elf.kaiji.
Threat Analysis
Chaos is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.
Ransomware Victims (8)
CTIWATCH tracks 8 organizations claimed as victims by Chaos on its data leak site, with attack dates, sectors and countries.
View full victims list →Known Campaigns
Chaos — Active Campaign March 2026
Chaos is conducting an active ransomware campaign targeting organizations across 1 country. Primary targets: Business Services, Energy. 3 confirmed victims recorded in the last 45 days. Campaign appears to have stalled.
🎯 Business Services🎯 Energy
LOW2026
External References
Quick Facts
TypeMalware Family
Aliases1
Also Known As
elf.chaos
Research Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.