threatlocker.comPublished
SafePay ransomware explained: IOCs, TTPs, and defense strategies
By Rayton Li and John Moutos, ThreatLocker Threat Intelligence
Excerpt
Observing SafePay ransomware, ThreatLocker® Intelligence has seen Mutexes being created to prevent additional copies of the ransomware running on already affected/encrypted devices. Typically, a different Mutex would be used for each victim. The switch to a more aggressive approach to choosing targets may be partially due to all the coverage of the Ingram Micro breach and the likely growing intensity of law enforcement pressure.
SafePay ransomware overview
SafePay is a ransomware group that was discovered by security vendors sometime in November 2024 and has since made international headlines as t…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by threatlocker.com on threatlocker.com.
Mentioned in the excerpt
On the same topics
- Etude de cas : Comment Hunters International et ses affiliés ciblentSynacktiv · Added 25 Oct
- Inside Trickbot, Russia’s Notorious Ransomware GangWIRED · Published 1 Feb 2022
- darkraas-ransomware-intelligence-datacyberpress.org · Added 19 Oct
- Ragnar LoaderPRODAFT · Added 18 Oct
