SafePay Targets Gilazo in Ransomware Attack on Media Sector
Ransomware Attack on Gilazo: SafePay's Latest Target
Attack Details
In a recent cyberattack, the ransomware group SafePay has claimed responsibility for targeting Gilazo, a company associated with Straight Ahead Pictures, Inc. (SAP). SAP is a media production company known for its innovative projects and educational forums, focusing on cultural histories and marginalized communities. One of their notable works includes "Beyond Affliction: The Disability History Project," a radio documentary series distributed by NPR.
Gilazo serves as a platform for SAP's initiatives, emphasizing storytelling and community dialogue. The attack on Gilazo highlights the vulnerabilities faced by organizations in the Media & Internet sector, particularly those involved in educational and cultural projects. The company's focus on collaboration and community involvement makes it a significant player in educational media production, but also a potential target for cybercriminals seeking to exploit sensitive data.
SafePay, a relatively new ransomware group, has been active in the cybercrime landscape, employing ransomware-as-a-service (RaaS) tactics and utilizing LockBit source code. The group is known for its double-extortion strategy, where they encrypt files and threaten to release stolen data if ransom demands are not met. This approach adds pressure on victims to comply, making it a common tactic among ransomware groups.
SafePay's modus operandi involves gaining access to victim networks through valid credentials, often acquired via VPN gateways or portals. Their stealthy approach avoids the use of Remote Desktop Protocol (RDP) and the creation of new user accounts, making detection more challenging. The group maintains a presence on the dark web through a Tor-based leak site, where they list past victims and provide details about stolen data.
The attack on Gilazo underscores the growing threat posed by ransomware groups like SafePay, which continue to evolve and employ sophisticated methods to infiltrate networks. As organizations in the media and educational sectors increasingly rely on digital platforms, they must remain vigilant against such cyber threats to protect their sensitive data and maintain their operations.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!