FBI Calls SafePay Ransomware Gang Among Most Active With 600+ Victims

· Cybersecurity · United States · United Kingdom

The FBI, together with cyber agencies in the UK and Germany, said the SafePay ransomware gang is among the most active operations it tracks, with more than 600 victims since 2024. According to the joint assessment reported on October 20, SafePay targets businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks. The attribution comes from three national authorities at once, underscoring how ransomware crews continue to hit large organizations and essential services across borders.

Why it matters：A three-country joint attribution signals that SafePay has become a priority target for law enforcement, and its reliance on basic tactics such as password guessing shows how much damage still comes from unpatched, weakly protected systems.

Key points

  • More than 600 victims recorded since 2024
  • Tactics include password guessing, vulnerability exploitation and phishing
  • Targets include businesses and critical infrastructure

Sources (original reporting)

More stories from this day