safepay ransomware recovery

Earlier this month, we were contacted by the IT lead of a mid-sized industrial firm based in Linz, Austria. Their organization had just suffered a massive ransomware attack, and all signs pointed to the SafePay ransomware variant—identifiable by the .safepay file extension and the ransom note readme_safepay.txt. In total, the company had over 10 terabytes…