Shanya Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
December 8, 2025
Last Seen
December 10, 2025

Related Threat Clusters

  • Shanya Becomes Preferred Tool for Ransomware Gangs

    Shanya, also known as VX Crypt, has emerged as a leading 'packer-as-a-service' tool for ransomware operators. This advanced tool is being utilized by cybercriminals to enhance their ransomware attacks, impacting various…

    2 articles · Updated December 10, 2025
  • Shanya Crypter Emerges as a New Ransomware Threat

    The Shanya crypter, also known as VX Crypt, has been identified as a new packer-as-a-service gaining popularity among ransomware groups. First observed in late 2024, it is designed to evade security detections and…

    3 articles · Updated December 8, 2025
  • CastleLoader Malware Expands Operations Targeting Logistics and Hospitality Sectors

    GrayBravo, previously known as TAG-150, has expanded its CastleLoader malware deployment across four distinct threat activity clusters since March 2025. The malware targets industries such as logistics and hospitality,…

    2 articles · Updated December 11, 2025

Recent Intelligence Reports

  • Shanya Emerges As Top EDR-Killing Tool For Ransomware Gangs — Techworm · December 10, 2025
  • GrayBravo Expands CastleLoader Malware via New Activity Clusters — Technadu · December 9, 2025
  • Shanya Packer-as-a-Service: A New Ransomware Toolkit Threat — Technadu · December 8, 2025

CVSS v3.1 Breakdown