The designation Chaya_002 refers to a malware activity cluster that served as the precursor to the Interlock ransomware gang.
Interlock evolved from a Remote Access Trojan (RAT) that was previously identified as Chaya_002. Chaya_002\'s tactics focused on initial access and post-infection operations, which were later absorbed into the more devastating Interlock ransomware attacks.