Severity: HighAction: Review

FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024

The FBI and cyber agencies in the UK and Germany said SafePay is targeting businesses and critical infrastructure by guessing passwords, exploiting vulnerabilities and using phishing attacks.

Excerpt from the primary source: The Record by Recorded Future News

Who is affected

Home users · Small businesses · Critical infrastructure

What you should do · Review

Review whether your organization uses the affected products and assess exposure using the linked advisories.

Automated guidance based on this story's classification. Check the linked advisories for specifics.

Sources

We link to original and authoritative sources. Headlines and excerpts belong to their publishers.

Original reporting

FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024 The Record by Recorded Future News · therecord.media · Oct 20, 2026 · Primary source
Severity: HighAction: Be aware

AOMEI yet to notify customers after hackers hijacked its software updates

In an email, the Hong Kong-registered company confirmed to Recorded Future News that hackers repeatedly altered configuration files on its update servers between April and July, redirecting the software to download malware for minutes at a time.