Ep. 90 - SafePay Claimed 590 Victims in 49 Countries Without Needing a Single Zero-Day

SafePay doesn’t need a zero-day. It logs in. The FBI, CISA, the US Secret Service and German and UK police just issued joint advisory AA26-293A on the ransomware crew, and its front door is your VPN. Tova Dvorin and Adrian Culley break down SafePay’s three initial-access routes, the five known CVEs across Cisco ASA, Veeam and SonicWall, its FileZilla, Mimikatz and ShareFinder.ps1 tool chain, and four controls to validate before a stolen password is used.

Read our blog for more: https://www.safebreach.com/blog/safepay-ransomware-cisa-aa26-293a-safebreach-coverage/

#cybersecurity #infosec #CISO #ransomware #SafePay #StopRansomware #VPNSecurity #CTEM