The SafePay ransomware organization has quickly become a powerful operator since its initial detection in September 2024, marking a startling increase in the cyber threat scenario.
Unlike predominant ransomware-as-a-service (RaaS) models that rely on affiliates for dissemination and profit-sharing, SafePay operates autonomously, with its core developers directly orchestrating intrusions and extortion campaigns.
This self-contained approach has enabled the group to claim responsibility for over 265 victims globally by early 2025, marking a sharp increase from just over 20 targets in 2024.
gbhackers.com
