SecuriTricks - crypter

Inside Shanya, a packer-as-a-service fueling modern attacks

The Shanya crypter is a new packer-as-a-service offering gaining popularity among ransomware groups. It features advanced capabilities like non-standard module loading, unique stubs for each customer, AMSI bypass, anti-VM measures, and runtime protection. Early samples contained revealing artifacts…

ransomware

evasion

Published: December 7, 2025

Linked vulnerabilities : CVE-2022-26134, CVE-2023-3519, CVE-2022-3236, CVE-2022-30190, CVE-2020-15069, CVE-2018-0798, CVE-2023-40044

Downloadable IOCs: 5

Olymp Loader: A new Malware-as-a-Service written in Assembly

Olymp Loader is a recently emerged Malware-as-a-Service offering advertised on underground forums since June 2025. Developed by a team called OLYMPO, it's written in assembly language and marketed as fully undetectable. The loader executes other malware on victim systems and provides built-in steal…

Published: September 29, 2025

Downloadable IOCs: 19

Not All Fun and Games: Lua Malware Targets Educational Sector and Student Gaming Engines

Over the past year, the delivery of Lua malware appears to have undergone simplification, possibly to reduce exposure to detection mechanisms. The malware is frequently delivered using obfuscated Lua scripts instead of compiled Lua bytecode, as the latter can trigger suspicion more easily.

Published: October 9, 2024

Downloadable IOCs: 18

Tag: crypter

Attack reports

Inside Shanya, a packer-as-a-service fueling modern attacks

Olymp Loader: A new Malware-as-a-Service written in Assembly

Not All Fun and Games: Lua Malware Targets Educational Sector and Student Gaming Engines