---
title: New Chaos Ransomware Group Targets US Organizations With Novel Extortion Tactics
description: A new ransomware group called Chaos is targeting US organizations with novel extortion tactics, using social engineering and threatening DDoS attacks and data disclosure for ransom.
canonical_url: https://codekeeper.co/ticker/new-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics
---

[Ransomware](https://codekeeper.co/ticker/tag/ransomware)

# New Chaos Ransomware Group Targets US Organizations With Novel Extortion Tactics

A new ransomware group called Chaos is targeting US organizations with novel extortion tactics, using social engineering and threatening DDoS attacks and data disclosure for ransom.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Jul 25, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

A new ransomware group called Chaos has launched attacks across multiple sectors, primarily targeting US organizations with some victims in the UK, New Zealand, and India. The gang, which emerged in February 2025, uses sophisticated social engineering tactics—flooding targets with spam emails then impersonating IT security staff over phone calls to trick victims into granting remote access via Microsoft Quick Assist. Cisco Talos researchers believe Chaos is likely formed by former BlackSuit/Royal gang members based on similar encryption methods and ransom note structures. The group demands large ransoms (one case involved $300,000) and threatens DDoS attacks plus data disclosure if victims don't pay. **Source:** [Infosecurity](https://www.infosecurity-magazine.com/news/chaos-ransomware-wave-attacks/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fnew-chaos-ransomware-gang-targets-us-organizations-novel-extortion-tactics%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Cyberattacks Malware Linked to Dark Caracal Uses Ethereum as a Backup When Servers Get Taken Down Aug 31, 2026](https://codekeeper.co/ticker/dark-caracal-uses-ethereum-to-sustain-malware)

[Cyberattacks Mirage2FA Phishing Kit Steals Microsoft 365 Sessions, Targets 3,500+ Organizations Aug 27, 2026](https://codekeeper.co/ticker/mirage2fa-phishing-tool-hits-microsoft-365)

[Silent Ransom Group Targets US Law Firms with Rapid Extortion Attacks Aug 12, 2026](https://codekeeper.co/ticker/silent-ransom-targets-us-firms-2026)

[Cyberattacks Hit Over 30 Minnesota Water Systems as Iranian Hackers Suspected Aug 11, 2026](https://codekeeper.co/ticker/minnesota-water-systems-cyberattack-iranian-hackers)