Shanya EDR Killer Leveraged by Ransomware Groups to Clear the Way for Ransomware Infection

The report describes the emergence of 'Shanya', a sophisticated packer-as-a-service and EDR-killer that uses DLL side-loading and vulnerable third-party drivers (BYOVD) to escalate to kernel privileges, disable endpoint protections, and enable ransomware deployments; researchers link it to multiple ransomware families and active campaigns across regions such as the UAE and Tunisia.