SafePay

#StopRansomware: SafePay Ransomware Advisory Issued by International Agencies

A joint cybersecurity advisory published on October 20, 2026, by the FBI, CISA, USSS, and international law enforcement partners outlines the tactics, techniques, and procedures (TTPs) of the SafePay ransomware group. Since August 2024, SafePay actors have targeted businesses and critical infrastructure across North America, South America, Europe, and Australia, exploiting known vulnerabilities and using credential-based attacks to gain initial access. The advisory reports at least 600 victims and provides IOCs and mitigation guidance.