CRITICALRansomware
Global

FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024

·Source: The Record

Updated:

Executive Summary

The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.

Analysis

The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.
Source Attribution

Originally published by The Record on Oct 20, 2026.

Related Threats

HIGHRansomware

Cybercrime crackdown across Africa leads to 1,462 arrests, $105 million seized

More than 1,400 suspected cybercriminals were arrested across Africa this summer as part of a crackdown on the gangs perpetrating online fraud, ransomware and business email compromise attacks, Interpol said.

The Record
HIGHRansomware

Authorities disrupt nearly 11,000 cybercrime networks in Africa

Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. [...]

BleepingComputer
HIGHRansomware

US, UK and Germany Warn of Active SafePay Ransomware

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/us-uk-germany-warn-active-safepay-ransomware-image_small-10-a-33164.jpg" align=right hspace=4><b>Vertically Integrated Double-Extortion Group Hacks 13 Victims in 12 Days</b><br>U.S., U.K. and German agencies warned that SafePay ransomware has compromised at least 600 organizations since August 2024, exploiting VPN, firewall and ba

Bank Info Security