Skip to content
Shanya Crypter Emerges as a New Ransomware Threat

Shanya Crypter Emerges as a New Ransomware Threat

First seen 8 Dec 2025, 19:50 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

The Shanya crypter, also known as VX Crypt, has been identified as a new packer-as-a-service gaining popularity among ransomware groups. First observed in late 2024, it is designed to evade security detections and facilitate the deployment of various malware families, including EDR killers. Sophos reports that its adoption by multiple ransomware gangs marks a significant development in the cybercrime landscape.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 193d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track BianLian and ClickFix in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed