Shanya Crypter Emerges as a New Ransomware Threat

Shanya Crypter Emerges as a New Ransomware Threat

First seen 8 Dec 2025, 19:50 UTC •TechnaduScworldBleepingcomputer •89% similarity •36.9

Article Content

Browse articles
ThreatCluster

The Shanya crypter, also known as VX Crypt, has been identified as a new packer-as-a-service gaining popularity among ransomware groups. First observed in late 2024, it is designed to evade security detections and facilitate the deployment of various malware families, including EDR killers. Sophos reports that its adoption by multiple ransomware gangs marks a significant development in the cybercrime landscape.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

BianLian Play Ransomhub Akira Crytox Medusa ClickFix AsyncRAT CastleRAT EDRKillShifter Shanya VX Crypt ClickFix Campaigns Shanya Packer Operation Windows