Security · Updated 21 Oct, 02:06 pm IST
CISA: SafePay ransomware hit over 600 critical infrastructure organisations
Why it matters for readers: This shows why using strong passwords, MFA, and up-to-date software matters to prevent ransomware.
- CISA says SafePay has affected at least 600 organisations across multiple critical infrastructure sectors since August 2024.1
- SafePay gains initial access via credential exposure, brute-force password attacks, and exploiting VPN access including IP addresses of the Mullvad VPN provider.1
- Paying ransoms does not guarantee file recovery, the co-authoring agencies warned, and victims are urged to report incidents to law enforcement.1
- The agencies recommend restricting administrative tools and privileges, implementing multifactor authentication, and improving identity, credential, and access management to limit lateral movement.1
- Network defenders are advised to keep systems updated and focus on vulnerabilities affecting VPNs.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started