SafePay emerged in September 2024 as a rapidly growing ransomware operation that explicitly disavows the RaaS model and manages all operations internally, claiming over 300 victims worldwide by mid-2025 with a high-profile early attack against UK telematics firm Microlise stealing 1.2 TB of data.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Tácticas y técnicas observadas del actor, mapeadas a MITRE ATT&CK (clic para ver la ficha oficial). Útil para priorizar detecciones.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
SafePay ransomware
*/
rule SafePay_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.safepay"
description = "Detects SafePay ransomware ransom note"
date = "2026-05-04"
severity = 7
score = 70
strings:
$s1 = "SafePay" ascii nocase
$s2 = "SAFEPAY" ascii
$s3 = "safepay.onion" ascii nocase
condition:
any of them
}
G r e e t i n g s ! Y o u r c o r p o r a t e n e t w o r k w a s a t t a c k e d b y S a f e P a y t e a m . Y o u r I T s p e c i a l i s t s m a d e a n u m b e r o f m i s t a k e s i n s e t t i n g u p t h e s e c u r i t y o f y o u r c o r p o r a t e n e t w o r k , s o w e w e r e a b l e t o s p e n d q u i t e a l o n g p e r i o d o f t i m e i n i t a n d c o m p r o m i s e y o u . I t w a s t h e m i s c o n f i g u r a t i o n o f y o u r n e t w o r k t h a t a l l o w e d o u r e x p e r t s t o a t t a c k y o u , s o t r e a t t h i s s i t u a t i o n a s s i m p l y a s a p a i d t r a i n i n g s e s s i o n f o r y o u r s y s t e m a d m i n i s t r a t o r s . W e v e s p e n t t h e t i m e a n a l y z i n g y o u r d a t a , i n c l u d i n g a l l t h e s e n s i t i v e a n d c o n f i d e n t i a l i n f o r m a t i o n . A s a r e s u l t , a l l f i l e s o f i m p o r t a n c e h a v e b e e n e n c r y p t e d a n d t h e o n e s o f m o s t i n t e r e s t t o u s h a v e b e e n s t o l e n a n d a r e n o w s t o r e d o n a s e c u r e s e r v e r f o r f u r t h e r e x p l o i t a t i o n a n d p u b l i c a t i o n o n t h e W e b w i t h a n o p e n a c c e s s . N o w w e a r e i n p o s s e s s i o n o f y o u r f i l e s s u c h a s : f i n a n c i a l s t a t e m e n t s , i n t e l l e c t u a l p r o p e r t y , a c c o u n t i n g r e c o r d s , l a w s u i t s a n d c o m p l a i n t s , p e r s o n n e l a n d c u s t o m e r f i l e s , a s w e l l a s f i l e s c o n t a i n i n g i n f o r m a t i o n o n b a n k d e t a i l s , t r a n s a c t i o n s a n d o t h e r i n t e r n a l d o c u m e n t a t i o n . F u r t h e r m o r e w e s u c c e s s f u l l y b l o c k e d m o s t o f t h e s e r v e r s t h a t a r e o f v i t a l i m p o r t a n c e t o y o u , h o w e v e r u p o n r e a c h i n g a n a g r e e m e n t , w e w i l l u n l o c k t h e m a s s o o n a s p o s s i b l e a n d y o u r e m p l o y e e s w i l l b e a b l e t o r e s u m e t h e i r d a i l y d u t i e s . W e a r e s u g g e s t i n g a m u t u a l l y b e n e f i c i a l s o l u t i o n t o t h a t i s s u e . Y o u s u b m i t a p a y m e n t t o u s a n d w e k e e p t h e f a c t t h a t y o u r n e t w o r k h a s b e e n c o m p r o m i s e d a s e c r e t , d e l e t e a l l y o u r d a t a a n d p r o v i d e y o u w i t h t h e k e y t o d e c r y p t a l l y o u r d a t a . W E A R E T H E O N E S W H O C A N C O R R E C T L Y D E C R Y P T Y O U R D A T A A N D R E S T O R E Y O U R I N F R A S T R U C T U R E I N A S H O R T T I M E . D O N O T T R Y T O D E C R Y P T Y O U R F I L E S Y O U R S E L F , Y O U W I L L N O T B E A B L E T O D O T H I S , Y O U W I L L O N L Y D A M A G E T H E M A N D W E W I L L N O T B E A B L E T O R E S T O R E T H E M . I n t h e e v e n t o f a n a g r e e m e n t , o u r r e p u t a t i o n i s a g u a r a n t e e t h a t a l l c o n d i t i o n s w i l l b e f u l f i l l e d . N o o n e w i l l e v e r n e g o t i a t e w i t h u s l a t e r o n i f w e d o n ' t f u l f i l l o u r p a r t a n d w e r e c o g n i s e t h a t c l e a r l y ! W e a r e n o t a p o l i t i c a l l y m o t i v a t e d g r o u p a n d w a n t n o t h i n g m o r e t h
Founded in 1947, the company specializes in the production of oleochemical products, particularly fatty acid esters and specialty chemicals derived …
Over more than seventy years of operation, the company has evolved from an import-export business into a diversified manufacturer, distributor, …
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| iql-nog.com | ES | Not Found | — | 2 jun 2026 |
| tavolaspa.com | IT | Hospitality and Tourism | — | 1 jun 2026 |
| parsa-beauty.de | DE | Consumer Services | — | 1 jun 2026 |
| soraris.it | IT | Technology | — | 1 jun 2026 |
| lcnet.eu | DE | Technology | — | 1 jun 2026 |
| verzolla.com | IT | Not Found | — | 1 jun 2026 |
| compactmould.com | CA | Manufacturing | — | 1 jun 2026 |
| cheeky.com.ar | AR | Consumer Services | — | 17 abr 2026 |
| adifse.com.ar | AR | Public Sector | — | 24 ene 2026 |
| investigacionesmedicas.com | AR | Healthcare | — | 29 dic 2025 |
| maxdream.tur.ar | AR | Hospitality and Tourism | — | 24 dic 2025 |
| nhpsa.com.ar | AR | Manufacturing | — | 24 dic 2025 |
| vitatrac.com.gt | GT | Consumer Services | — | 24 dic 2025 |
| seguriamericas.com | CO | Business Services | — | 17 dic 2025 |
| aysa.com.ar | AR | Energy | — | 14 dic 2025 |
| adesursas.com | CO | Agriculture and Food Production | — | 18 nov 2025 |
| tango-hotel.com.ar | AR | Hospitality and Tourism | — | 10 oct 2025 |
| optivosa.com | MX | Business Services | — | 26 ago 2025 |
| salemma.com.py | PY | Not Found | — | 22 jul 2025 |
| bisa.com.pe | PE | Financial Services | — | 22 jul 2025 |
| palmasdelixcan.com | MX | Not Found | — | 16 jul 2025 |
| ibague.losolivos.co | CO | Consumer Services | — | 29 may 2025 |
| gruposancristobal.com.mx | MX | Financial Services | — | 29 may 2025 |
| estudiolm.com.ar | AR | Construction | — | 26 may 2025 |
| kolpa.com.pe | PE | Consumer Services | — | 6 may 2025 |
| norson.com | MX | Technology | — | 30 mar 2025 |
| retycol.com | CO | Not Found | — | 30 mar 2025 |
| havenresorts.com | MX | Hospitality and Tourism | — | 11 mar 2025 |
| jockeysalud.com.pe | PE | Healthcare | — | 11 mar 2025 |
| cali.losolivos.co | CO | Not Found | — | 11 mar 2025 |
| proexequialesresurgir.com | CO | Not Found | — | 15 ene 2025 |
| termopuerto.com | SV | Transportation/Logistics | — | 15 ene 2025 |
| equipo-postal.com | MX | Transportation/Logistics | — | 15 ene 2025 |
| ddelta.com.mx | MX | Transportation/Logistics | — | 15 ene 2025 |
| itca.edu.sv | SV | Education | — | 25 dic 2024 |
| OMINT | AR | Healthcare | — | 19 nov 2024 |
| Active Cosmetic | AR | Business Services | — | 19 nov 2024 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
Founded in 1986, the company has become one of Europe’s leading manufacturers and distributors of hair, beauty, and personal care …
Founded in 1983, the company specializes in the collection, transportation, treatment, and management of municipal solid waste and recyclable materials. …
The network was established to provide integrated cross-border transport solutions, allowing member companies to coordinate freight movements efficiently throughout Europe. …
Founded in 1958 (with the current corporate structure established in 2007), the company specializes in supplying industrial components, automation systems, …