FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations
FBI and CISA warn of SafePay ransomware attacks impacting over 600 organizations globally.
The FBI, CISA, and international law enforcement agencies have issued a joint advisory regarding the SafePay ransomware group, which has targeted over 600 organizations since mid-2024. The group utilizes stolen credentials, VPN access, and exploits known vulnerabilities in edge devices, including Cisco and Veeam products, to gain initial access. SafePay employs double extortion tactics, demanding cryptocurrency for data decryption and threatening to leak exfiltrated data.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — SafePay
- mitre_attack — T1110