Introduction
The SafePay ransomware group is a cybercrime gang known for deploying ransomware to encrypt files and demand ransoms. They are relatively obscure and not widely discussed on illicit forums. Their activities include data exfiltration and file encryption, often using tools like WinRAR and FileZilla for archiving and potential exfiltration.[huntress.com November 14 2024]
Activities and Tactics
Information pending cataloguing.
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
- CyberGate:
- Cyber Eye RAT:
Attribution and Evidence
Information pending cataloguing.