Malware Analyse

Under the Hood of SafePay: How the Ransomware Encrypts Files, and Where It Slips Up

by Florian Walther, CERTAINITY Incident Response Team

In this post, we show how SafePay encrypts files, how its file format is structured, and which implementation mistakes we found in the code. Some of those mistakes can genuinely help victims in an emergency.