Ransomware gangs turn to Shanya EXE packer to hide EDR killers

Published on December 9, 2025

Several ransomware groups have been spotted using a packer-as-a-service (PaaS) platform named Shanya to assist in EDR (endpoint detection and response) killing operations. [...]

Continue reading on website
Other news

Malicious VSCode extensions on Microsoft's registry drop infostealers

December 8, 2025
Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing malware that can take screenshots, steal credentials, and hijack browser sessions. [...]

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

December 9, 2025
Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio Code (VS Code) Marketplace that are designed to infect developer machines with stealer malware.The VS Code extensions masquerade as a premium dark theme and an artificial intelligence (AI)-powered coding assistant, but, in actuality, harbor covert functionality to download additional payloads, take