CISA: SafePay Ransomware Hits Over 600 Critical Infrastructure Organizations

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding a widespread cyber threat involving the SafePay ransomware gang. According to the agency, the group has successfully breached over 600 critical infrastructure organizations worldwide since 2024.

As reported by BleepingComputer, the threat actors specifically target vital sectors, causing significant disruptions to organizations that form the backbone of public and private services. The scale of these attacks highlights the growing sophistication of modern ransomware operations.

SafePay typically employs standard extortion tactics, infiltrating networks, encrypting sensitive files, and demanding substantial ransom payments for decryption keys. These cyberattacks result in severe financial losses and operational downtime for the affected entities.

In response to the campaign, CISA and international cybersecurity partners are urging organizations to fortify their defense mechanisms, maintain rigorous software patching schedules, and implement robust incident response plans to mitigate similar threats.

This ongoing global campaign serves as a crucial reminder for organizations in Uzbekistan and the wider region to prioritize cybersecurity measures and safeguard critical infrastructure against increasingly prevalent ransomware attacks.