Risk Letters

Threat actor

SafePay

TLP:CLEAR

Facts

  • Motivation: Financial
  • Malware and tools: 7-Zip, Invoke-ShareFinder, WinRAR
  • Techniques (MITRE ATT&CK): Valid Accounts, Replication Through Removable Media, Drive-by Compromise, Exploit Public-Facing Application, Phishing: Spearphishing Attachment, Phishing: Spearphishing Link, Phishing: Spearphishing Voice, Windows Management Instrumentation, Scheduled Task/Job: Scheduled Task, Command and Scripting Interpreter, Command and Scripting Interpreter: PowerShell, Command and Scripting Interpreter: Windows Command Shell

Members get the actor's profile, its recent incidents and our assessment in the dashboard.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.