GINC-APT-1208 · Criminal

SafePay Ransomware Actors

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Unknown
Sources
1 source carries it
Identifier
GINC-APT-1208 · safepay-ransomware-actors

What it is

The SafePay ransomware group is a cybercrime gang known for deploying ransomware to encrypt files and demand ransoms. They are relatively obscure and not widely discussed on illicit forums. Their activities include data exfiltration and file encryption, often using tools like WinRAR and FileZilla for archiving and potential exfiltration.<sup>[huntress.com November 14 2024]</sup>

Tools

The tools and malware families the sources tie to it.

  • Cyber Eye RAT
  • CyberGate