Tag: crytox

2 Attack Reports | 0 Vulnerabilities

Attack reports

Inside Shanya, a packer-as-a-service fueling modern attacks

The Shanya crypter is a new packer-as-a-service offering gaining popularity among ransomware groups. It features advanced capabilities like non-standard module loading, unique stubs for each customer, AMSI bypass, anti-VM measures, and runtime protection. Early samples contained revealing artifacts…
ransomware
evasion
dll sideloading
medusa
stealc
akira
qilin
lumma
crypter
bumblebee
edr killer
packer-as-a-service
crytox
castlerat
2025-12-07
chuchuka
wht downloader
Published: December 7, 2025
Linked vulnerabilities : CVE-2022-26134, CVE-2023-3519, CVE-2022-3236, CVE-2022-30190, CVE-2020-15069, CVE-2018-0798, CVE-2023-40044
Downloadable IOCs: 5

Shared secret: EDR killer in the kill chain

This intelligence report analyzes a sophisticated tool designed to disable endpoint security solutions, particularly EDR systems, on infected systems. The tool, known as AVKiller, has been observed in multiple ransomware attacks since 2022. It is heavily protected, targets various security vendors,…
ransomware
edr
ransomhub
compromise
blacksuit
qilin
dragonforce
medusalocker
driver
heartcrypt
lynx
avkiller
2025-08-07
inc
crytox
threat-sharing
Published: August 7, 2025
Downloadable IOCs: 56
Click here to see more Attack Reports