Home » News » Feds warn companies about ransomware group
© Shutterstock
Today, the Cybersecurity and Infrastructure Security Agency, Federal Bureau of Investigation (FBI), U.S. Secret Service along with international partners recently released a joint cybersecurity advisory, warning companies about SafePay Ransomware, one of the most active ransomware groups in 2026.
SafePay actors compromise credentials and target known vulnerabilities in internet-facing devices to gain access to victims’ networks. They often connect through virtual private network services. Once inside a network, they use legitimate IT tools to delete or disable backups then steal data and encrypt systems. The group threatens to publish the stolen information and pressures victims to pay, sometimes calling them directly. There have been approximately 600 victims in the Americas, Europe and Australia.
The advisory provides observed tactics, techniques, and procedures as well as indicators of compromise and recommended mitigations. Companies are urged to implement recommended mitigations including keeping all operating systems, software and firmware updated; requiring multifactor authentication; prioritizing patching known exploited vulnerabilities in internet-facing systems; maintaining offline backups of data and regularly test restoration processes; and segmenting networks to prevent threat actors from spreading ransomware.
“By following these recommendations, network defenders can significantly reduce both the likelihood and the impact of a SafePay ransomware attack,” Brett Leatherman, FBI Cyber Division assistant director, said.
Click Here For The Original Source.
——————————————————–
