Ransomware needs a way in. Stolen credentials are the cheapest one.
unsafe Ransomware Group
Ransomware group profile
12Victims
RussiaSource country
141Impact score
Description
Unsafe is a ransomware group known for its sophisticated attacks targeting various sectors worldwide. They utilize advanced encryption techniques and double-extortion tactics, demanding ransoms while threatening to leak compromised data. Their operations primarily focus on financial gain through ransomware-as-a-service (RaaS).
Key insights
- •Employs double-extortion tactics, demanding ransom for decryption and threatening to publish stolen data.
- •Targets health institutions and financial organizations, causing significant disruptions.
- •Utilizes zero-day vulnerabilities and advanced evasion techniques to bypass security measures.
- •Gains initial access by exploiting specific vulnerabilities in various software.
- •Utilizes a variety of malware including GrandCrab and Emotet.
- •Impairs security controls and removes indicators from compromised hosts for continued access.
Threat Level & Status Breakdown
For unsafe · Based on incidents in selected period
2.4threat level
Aggressiveness4.8/ 10
Lethality0.5/ 10
Criticality2/ 10
Status Breakdown
Data Leaked8.3%1
Claimed91.7%11
First seenJun 2026
Last seenSep 2026
Avg ransom—
Payment rate—
Statusactive
Sophistication0
Last updatedSep 20, 2026
Recent activity
Monthly attack count for unsafe in the selected period
12Total attacks
4peak in Jul
3avg / month
↑ 2 vs first month
Intelligence
IOCs, YARA/Sigma rules, and related families for unsafe
- 2e1cb6a2cb1b284dbdd0b8d47d53f946ca0b27a196c45600cc656889c2e57623
- 1c44d2d85e7ee5f9ec7eddf0e3e8b8b0f11358870663be32f6b6657c1bb0ebb1
- 9984ccc03c856ca1a20092d27a92a4a3c619a406c5e5f709e9b4278f126f2f9b
- 93e43b11b5b3771edec9bf42b78382bce0b14278c1e7d2d1f8bc825035a2fd1a
- b0d73b89186e3a96a907c17ac0a295065ba7e7a36370a85d1920aea2f3dc6568
- 0e9193449fd32e89d2b5de65a276cf52
- 500419896d42ee0818f210db317439df7458ad9f6f68f8b33690bd6f18c7d05a
- 0000a724c97165608964ff3635d10629
- edfec48c5b9a18add8442f19cf8ecd8457af25a7251cb34fe2d20616dcf315ef
- 54747f7dd201b64853b39f691fa19614f383335916e67abfb74fb09c1b2d2c25
- 6cd08d5ae4cb9ef06180311d81e14a5b130b66043f1612d08a9e97be289f9750
- 594d74a49e307be7cc9e1ee5f1023684e6820cf11bcc968bee590391e1ad5a5a
- 00020acf5bc8a50fc0e5173059b073e1
- c710e15d91756124d8d6755d2766ff4b
- 1fe601588ac6c79655f18487ce8e1c5253c97faa4e4dbb2fd84473da1e5a368f
- aee401b6a16136e6f2244c47c35172781d51cd1a
- 3edd00245d93664a33a724ba377150e5531ed033
- 604261164cae84013a3db91064aee8d29b7cb1566b607b3e34bf906f8cef2c51
- 5f8a27e70059cd1713fba0b45700ca8b
- 8369b9dea588975bc7238a663c62a8d7d67929fe5636ed1863062b0d0f71452e
- 6b31a0eafa7cecab1514fbf2d98889810cc898f54aeae45d088e8e3a2ba23fb9
- d8f5eff15137e99c0c1498478c1b128560018858143e5be64ecf4827db970e67
- c87d097618eef16cf90732a01088aa3b9b10edf2c8a54a1353cd95ca7f616a34
- 212b0f237a07c0bacc3fe4b7c38ad5b28b3b230bc93d2e4f292861f802a22f41
- 911881dda676708ad47db253287a925fce8cc62a98c4f5fc14fcf9c56c592ee1
- 8b40ef913ca8190e2bdf7aca42128b4659722ec82ba7e3948e6131adf692b7b5
- 099217afc56d680f99b240a14de85f0e0cb8e52ddf97337b85cb4bf58ba3525b
- 68cbd22665b762d29965f799a4433afb305163bf422bf342151c29bd1dfe0669
- 19becbc09af3819fe4764ac5fb0f45bc5ecac65c
- 0d2127b36ea18a5051ffe0042f934e135a1e5d0547ab9202616e60796155f0bd
- f8b32d405caf5dd3ab42553accdf5d7c4d2a82425aeeb4a860568fc3768f63ef
- fb57ae3048b4f62b3072ceb7651af451493314e4c48883b2f53912b262abff78
- 8dc1b1a7f1b53dba18d4ff20018bb1b056ff7a9ddee7cf42ed8cab4fda10c77d
- 20fa0ccd8e8ec5c0b42d824fa79c859e5dc8709f80e49f8968bae5fbbca4c35f
- 4c34d3f966585a19a35c378b7b5d2781c7a99ef296e797efe3d90627babee98b
- cdf81e591d9cbfb47a7f97a2bcdb70b9
- 70278807bb0ef28f0a30b9d7b8e9da62ecfed9285fc2746a74167cceba21976f
- 000ba3cc5b7592d8e4c55c62ce543d8e38f37fa58672ca1eb034c0ed1af852cd
- 8df88bcfed6e1c6c28d9c48748b3560a24b6dbd6e14764d1adf471a7dbf29e9a
- 9b5740bb875a22da4ad796ec29fd957a30f19eec8166232609c3f6865f4b1d84
- 86935fc082f40b2ee0c4eac92070e59a25b173f5626b01b29ccdfbba2a11ce39
- 94dbbd74643f9cb7f362510425e66b198f72109531142346200b9cddaa1b6a20
- 25453cbaf5b0b0c2617ae58723674d2797a4b96d
- 1ec72a02b356cf11e1946649e4eebe8db6e98652bee5a373280b7d94853d306a
- 282461f5ef1fb8f2e1aacbea765845555beab381
- 5ca2accfa76bc6257333f60e2d3a9354
- b0f4262fb225ec0d6f283749c34ba0f1
- 0157f1df37b995a56fae6686a23204b8feb274269d8928276f3e3d9e324999fc
- a91ee8f9106040265c635673ad0842ad
- 95e0fc3167ac197648d1082e675a09c48ccae790c16d9d0383936d41dd08615c
- f1b1e1267a9301244120ef7d47cd4174fd94fd60
- 21d780933d9124ce4c262c005303387a9a0bd7919c46fcc51a4245f91591e933
- 1970a8ab5a7b0bcb70aaef118063debf607a9f02e323e0645d9349cb74d7fcbb
- 98fb7574932dbd6fe9e75169982edfba50f86175
- 13dd10e040ea7116d43cf44ec74769d63d8e4eba4268de92004bd89133044a9c
- 04461a6b8ac0fea7f089d739aee9ed081d9a1fa30c837214ef3cd50e60be0804
- ccb78358c06111ff4c3a6d816974a9091442343322f15e66f797c24d7afb1b18
- c42ebf24d27e0d543195f75ce1362f3c
- b2d02aceb2e6800770e26912ea59fbf369b434e5c7585608982e49ff6c56ec06
- 00007aca4316b44d11a930424d00e2955d5a4947de75a9263c2149cf8d36a931
- 3ca01bb3446730782a39a10dfd0b8bdb8a0fe1506be946f951bb349faaaf9abb
- 005833e34e66e9555edd797bb70f7eae63101103
- 51f744837df71d43a8775cb993155bf4fe2fe11601609b7a5c2ccf34045b007a
- 95354e699bf109bdb3edae5f05d4bbf17e991319aa4563c87b1dd44c7ab5df49
- 6a3af8b96e60d3713fe261f17f4d2a4704b3ae9decda3fd34d9888e7f9fc8d87
- aedb2e969df9c753cea46699fb7b2782204fbc9f78ac510c407e43015b266a39
- 005833e34e66e9555edd797bb70f7eae
- f2e9429307d67fc9a71b751b4da15a32
- 1032f9e96a249c12f2f6d42678264114
- 70d24af176b89562b790421659acebd686a29850eb45edd8c9de1e632465d472
- 0d9df89874ebd8f45d941ac28175d628c35954f40edce13417b29d3fb70012c8
- 0111b8eab68ea355baba3756724dfa0bcc4592343d6d58a687b307c936f79703
- e8d20935dd2e3324bdcc43c51e6d2d9fccac41bc
- d55e4133d9df7f3f419968b08360ceab338ca82d677f057842c51e49c4bd42a5
- 2b97f0bd6631b3f3d0bf2e9601307f23bd75b9b5103ac50c8b662bb287a6f65a
- e9f92b8ea050f81e45a71188c5837c97873a9c3b22a3eb22abb30eaabd6811d3
- bd7e7b92c3b1e143c2865ffb672ff925eb4f5d15ce582ca450031022a933019b
- 7dd0c170646874ae707f56f9921262ed
- e4ff2530e3a17fcbac51742096aa9e0b3f9f6de883e2412b0214197bf2cc42a3
- 0011768a0fd75e699b58fc56541c3987
- adffaaca8f290632204c81a1f211d74e
- 60a82b1d54220b753c69fe9168a18b99edd1fc3e872fad8236a5919066fdfe4e
- 62731c7d44c217b79724cb23bef4267570332ed67c1c1feef3f6c803a6f57ef3
- e68d8c9006af936b65d814a770f089cd756ad3d3eef42c71dc3abb319b128755
- a6b21ecbadd41d5b9ca1ed418ea93ecf
- 80be72b8fe27510e702b7038cc89a4bad022982a693ae0f9c115699d99192118
- 4d1cca110c4a28770ea1d2a8c146f588b0fe7894132b3bd53b6a22a8a4e45f34
- 5012bec121597c6c7cdb80d56b38477c3f844bc2
- 293bfed7263ffb9250afff9b2beb296d803803b0e42d4afcd200ee7e7eccd243
- 2acb3db763177dc3d7d62cbd8765c25ac66255bdef6cdb9af016a0536a70067c
- 5a14332ca64f1ef5247f8e2a5de3daa1997fefd5c0fb7cb8be483a02a9e100d3
- a5263ac8bf54dc9de0ad8cd5ad6d26f54ec60f55111bb3c946bff8c76353c7f7
- c526db05b1de1a273dc9cbcab7ab47f3e998ae91836c4638231290d810bfcf0d
- 0001855facdbf50a9df1fd7cd7046a709025b5e8b1fb26933749511830b10e77
- 002219a91bcb2abbbb48677211560ad2db87afe4
- efde65bfba9115a38f43dfd54ee615c88b2b940316c6118d2861ecff6f7d7d2b
- 24e837cfd43d6ce05c441ecbd1f68209caf340fa24340f8c4d9089aaf72898d1
- 76eb6422b738c86d51f0937e26f0c839cb98aa324d1f63a99326b96fa792fc54
- 608fa41b507bab3b85f2d23f24a0d045930a18e87bee6a315a9f84216beb0a01
- 0b167d2a39265805a022d361897fadaeb129285de408d14e9c1aa0307c9406f4
- 9fc5747d13dba47dd7d9fdfe2aab6f2eeacebb21b5a34c0939a669b868551f24
- c701245a46aff59103badb6738ac40c7d99ab39bbd0479056297a095624e871f
- 000401e281a0ca7f2f981b189f31033c
- bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c
- f761511a70e320b8c596af699652550c86b366d29e764e8cb39a95a5de1bb4d3
- d4988878a2c4cf9432225945750001c2d16ff91f6e9cd58d97a773ea13afbc68
- 1040a3c90d468e1190ea767789d2a87fa915f543caf6e7cbf7c37b95f735a948
- e024586c4ec8017f9197d4a10addfb223f26cbcf189e6dcec6642fcafffca8a9
- 55879bf900ac472938df1b3df292792a003376586c491d9e6ef5725dfb79ca90
- 0314a5dda2b69835361785e823e0728880eec9e9321106946208521c5ee6ae99
- 62d93cfd8f1ad89c57e3e01c499406b9d5db9a7cdb534ea8a887015a973e7675
- 7d2e9e74d964349bacb1ed588fcb81490e8b9f6b6fb56fe571ab83917cfeefce
- d01b4862a51f9694828e00c8315a3d9a
- 249456bf12551ac792bb8c3538406f8bcfc853d382a0c23956d96c4eb054a429
- fcb1f78113772eaf035aa3f26b0b7f2a12e3ab14528514ead041da9133f8b85d
- eeae7b4b00838ebde8837405a28adaed2e883ecb472dc9cc775fb5e38520beed
- 8813693f334e5f8af9eb28c90080d6e6564288ec71ee16f53935a35529c5716d
- 894d0a79aad1e747c5453ae4a84ba45236d1499a3a760e8b4d30093b36cbf364
- ccc8384811bbd4380615e47da8a794cddd63ac3268a1ae4215a159accc3107a1
- a30adb04b04c2a5e27801c0c41bcf384b5ceff0510df50b1f90e13d70563d414
- f1333467b83989ae18c29bf621bf5ad9
- 655a20bf6ad2f6019b38f4e34f2b2b33
- 1beb2bb7d2fd0b1c6349a893c8202d0acd1be34efac5014ecd95da36fbdb0c6a
- 658ae033eda508906b626329c232fba5
- 46dc9490437bc357de26b9b3142610f112f492229bb0cb8cf2b503b118d52449
- 074ee3a63b8da8d363beb29fe7f6af67bcd4807534dcf38ccae60c10b3b2e15c
- 882ab7c60ddaced7e9da3c74000725b0ad968585621364c8b3b19f5f21ec1b21
- ef2ea2c054d5a1e894874ad20438a34617586f25730b753ca7e2290eff10c943
- e8e12acc9600677cecbfc09f17919354c9bcd6648f3e579abc5a4a99408c95ec
- 96ac48f66243b0732bc904c8e7d2de836bb278905cb952c109e6358b879dd164
- 60b081b83a39b098d73f84aa0361eb836c7be1694cef6ce3b8397e7b77b19382
- 867434cbf3ad53e9ee2c9d3e28adb15c442b8035333b08a62e99b4f45af229e0
- 540b12972441a57a557dc03d6b85fca1e50fd3ccb40ee3bdcda0fd2b693758c9
- 00008311a2c9d7782ce594bce0e2fd1bf5c31a288e6e9e19e70860c1599b8511
- ed164c984094fe9212530f14bccec6d2cd8b7fabd2531b0d4cfaa3ccdb2be449
- 3776dbc03713c438e6bf8ad3ef966ead
- 599b86707d310d834b95337bc6e6fb56f0b177133531fc32bfcd0a45dbe4d5ec
- 8e11cb65f42b8a7f737954a6da81ff0bb8a4b4e24581c07117e24006d077bb98
- 31fb8b619b3aec1857ff5c346cb341fc027d83b1a875dc745a374f7d9cbcae3a
- 48b9f20168267357e9dd911cf0941f20a95494bc4e6ee82e1755d746badc9226
- 31d5ad24a1e77963f1ab48467166137b28e931a32613f617b00109c7a73968c5
- ea436d5f3f77b7f619a12a58b5aebd4c096f8e0db0f50802a6c54e4e803929c9
- 960dff7bd18c8701cfb29a5395e247608aa3a0ac39e6eae99d58410105c68611
- fc9679d27144f091504ea3c29c3f86cc14301c8bec72460a748043e08668bc3e
- 760c8f1d2fbb6485566933a8b6b6aac1d51ff0b1100103438f136b79bcdfd8b8
- 401f3dcdedda9c66003dd989fa2b1db0252b405263b8edfa0778158344bc1b28
- d5a61c749e44e47159af8a6579dda121
- 4bf71b0ba76276982cf33cc43685109023df2eba03e6f3005fad832511c07212
- 8bd8b433cecb5ba9eb08f322157629c6ee42194896f7b1f6e4ab1f14d334f165
- 17304ce709ccfa4b19ae19e31d07072b6cff581404ca80e8e8c56682ae5c210a
- d73bb7e1ccd8f55e885b7a6d0a885e4c08f7ac087c02ed67bd913761f3e1c9c7
- af5f250eab105e11611ca818c81cdd067abc0cd68f1100af4fb5025b836dea12
- 137d32de86757d5183f6f69e4bfee65fbc895aae6d04de199de4ffdf6bd1a339
- 47327df0f35e7cd7c8645874897a7449697544ae
- e539f8f294aa4d06ee143f7200163b1673580b918f1ac6785d53ef16c347198b
- c72946fe3d0f5990574ea6686db5151ff04b69325374497a95529f217cd71b73
- d12aed12ed7af4b381361e5e532804f14f6f219ad423d4379f169e897336cde7
- 78def2e13e505c8270810c1a18d05598779fadd0
- fb3dc60a9a8988952e9a136fc2302c5d6890267d9d8d24152720724079aab5ce
- 000000c30bd1247c9088ff83758a335a9d1aeffa89ec8757fc7de2f6ac563080
- f0cec5fbeb1912a391b3330543b6c2466832c00845de7964217b99b1b365dca1
- 98f867eae6642bd6da41f357945367d401d0f07678e01ca2741a0fdac631146e
- f4842128e3ec436070567957109e22b9
- dccb174f0e5f29f0da6c190425105add17e2ac90
- da0f6ac0b30f8e37e9f0e25b605c3a168c1ff80357d66cd2d25bdf6c80964dc7
- 5d03b002dfe6e8cbee6ce8254c91ddf5139c0f943d0a532049a819444033da12
- 3e4a22ba6ca9d3dd9994122c6edaa86e0733adb6db4f8ebf3c73668683edce7a
- 590cef7ce3dc5b8ef7f5d64a8cd39dac
- bfe237e27d34c827f9a32ade1623251230a7793a7bf3e3d796382f478210ea5d
- efb23073645485864ff9f8f2e0ec5f11518772fe671e152fd575d26947240873
- 4fef8b3cd13b424b88352f9dce2572d39d09a1bcd7f847a53863c1358c28281b
- cf47a903a61b4a9b8999661e80fbaabaa87a49a709027ac1831b756302af23d0
- 96438dedca8c7e5bf0c9bd882ec4a15b10917c5e2fbe26a15817b4220c7246c8
- 04d5e7b49a1c4f7e6e9cea3a2c77952c65905a80ccd929e0f752e04c8e24084e
- 160a4674d1a4048d80b3617538c5c764
- 557ab2b258601af02c93906cdde61ba2faa8d509
- 1ece493d73ebd56659df53ee2b2dfb80d7180c81126bff4b3cd883642741a95d
- 167d33b22f84f6dee04e24e11ec682c86774b0f61b0e2a01d5a50cf19c9b41fc
- 7b53268e0be6ce2c0cfc43c8c3b3d2a80a247b55
- 64b4fdff6a88ebf1ba203f97e6a6d0a5428033bc68dbbba82a617b45f3b49dab
- 367a7ba41c5c7f4cc4c1664781b8540d
- dd082d742a5cb751290f1db2bd519c286aa86d95
- 8d7cdf73075ae6bcf0640fbf1137bd659a4f587047a3d12cd5c5fb304b2c6082
- abea123f6c9f687d66b224525bf9403efd4b2679a9f4621b2b54e280e7bb15e2
- ff2f7a3d0589be9ddfbbce6d3ece65c6ace860dd
- 0ac86a08f4542e6c80cc7b95c0e0d6b181e11c18b4e10439e71e0eb7d50e42a3
- 58420c5d66d63ded0a3270b598ec002d3cf50fa8df9b89e48aae439efaf4da6c
- 4de1a86378d30055bcb9f7ef18894b22cd340f03d9c70b0a1151d171f5b81aad
- 2a7e44c4035efa9cf51a7699c6731ef77322bd034f0db8936f7c484406ff05d6
- 937216d5260f3e76138be16831052b04
- fff0805df9f77bd4070cf5ba3c3c69242d58f90b91a2ec22b5e1a09b33237aaf
- 4f9447229447e5135abf3ee76c1c549ea8f1cb0b692f39d10dca225e00854b5e
- 19d27d29272ae1777763a6e9939b7eff3de043c22d70e1b547765ffc4a651bff
- c85e0f17d44b49be9c56ba03a5641b8654517d984a6b8e4b9bb847a67b255eb8
- bd344490deb74051be07638077121749dae50646e3e4d2755df31359cacaa68b
- 271de535269976b57edc652301f941b9b429e392204b279f60d03843e658b014
- 8c0f3f63e5920c4656104cedfe78627a4667895605c9382a46f3078d2c975fa2
- f42a6a01033504a29a7972d24af4e6cc2c242307
- 7c452b712f7d12ae3f8da4d240444ef89e3a3087
- d8c11534f0824b073a7f83b83d2476b2bc86ed57f75981c4c4ec2aaf62c46918
- 1f985be69613298f51f2b1059c372bed
- d23fc3b30767e43db14a5b43168ad4e2b63320adce77c107bd2a88b496474679
- 9e0bb749d7fe084825a384c881cdf26dd8ae3b6a78b52487f1cf6b5475d7a1e3
- 70820ae8d25e737f579bfe4e6449e9e9ce706fe1c2f8877eb578dbff6835f593
- ac87041d3136430e573bb7e4ba54d705
- 6bddd57ff69e9a51d8d4a3f7e49701f265fe71baa7f855420491c04e5f752ea8
- ffab9a4aad2311814e3cca7f9ae1b9679ba493bb96294af6e422a3fe3782c581
- de7237a20a6499a197fba63cd0e02a36541db51c
- cd3444d566df3b0ac85967c6988a5e56335fb1bfc67e822eced5c565584e13b0
- 4f424c884a5e4e1be0602fa7558fe67c707f13feafa3e483ab12c824160e94cf
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for unsafe
CVE-2023-4966
CVE-2023-36884
CVE-2023-22518
CVE-2022-47633
CVE-2022-45359
CVE-2022-26134
CVE-2021-40444
CVE-2021-27065
CVE-2020-0674
CVE-2020-0601
CVE-2019-1367
CVE-2018-8453
CVE-2018-8174
CVE-2018-4893
CVE-2018-0802
CVE-2018-0798
CVE-2017-8759
CVE-2017-8570
CVE-2017-8464
CVE-2017-8291
CVE-2017-17215
CVE-2017-11882
CVE-2017-1188
CVE-2017-0199
CVE-2017-0147
CVE-2017-0143
CVE-2016-7262
CVE-2016-0189
CVE-2015-1650
CVE-2015-1641
CVE-2014-6352
CVE-2014-6332
CVE-2014-4114
CVE-2014-3153
CVE-2014-0514
CVE-2013-2465
CVE-2012-3993
CVE-2012-1856
CVE-2012-0158
CVE-2011-2110
CVE-2010-3962
CVE-2010-2568
CVE-2009-3672
CVE-2005-1790
Other
T1486
T1486
T1490
T1490
T1021
T1021
T1562.001
T1562.001
T1070
T1070
T1041
T1041
T1078
T1078
T1059
T1059
T1021.001
T1021.001
T1071
T1071
Victims(11)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| voltgames.io | Portugal | Claimed | 2 days ago | |
| Geeky Bunch | United States | Claimed | 7 days ago | |
| WatchOps | United States | Claimed | 9 days ago | |
| Amzur | Brazil | Claimed | 24 days ago | |
| presentations.ai | United States | Claimed | about 1 month ago | |
| DECK APP TECHNOLOGIES PTE. LTD | India | Claimed | about 1 month ago | |
| Constellation HomeBuilder Systems | United States | Claimed | about 1 month ago | |
| straightperformance.de | — | Data Leaked | about 2 months ago | |
| Jiva Health | India | Claimed | about 2 months ago | |
| CCR Solutions | Brazil | Claimed | 2 months ago | |
| Deutsche Bank | Germany | Claimed | 3 months ago |
Affected countries(26)
Countries where this group has been reported to target or leak victims.