From open source to open threat: Tracking Chaos RAT’s evolution
Chaos RAT is an open-source remote administration tool (RAT) first seen in 2022. It evolved in 2024, and new samples have been discovered by TRU in 2025.













Gabor has been in cybersecurity for more than 20 years, holding positions ranging from Virus Analyst to Senior Threat Researcher via SOC Analyst at companies like Citi, Sophos and VirusBuster. Gabor participates in various research projects including file infectors and small-scale malicious campaigns through malware in-depth investigations, especially static and behavior-based detections, Cuckoo Sandbox development, Threat Actors attribution and several SOC Analysis, including advanced adversary interdiction. Gabor also holds deep experience in several programming languages, and script development.
Chaos RAT is an open-source remote administration tool (RAT) first seen in 2022. It evolved in 2024, and new samples have been discovered by TRU in 2025.