The ransomware claim alleges that the threat actor safepay targeted Avance Agricola SL, a Spanish agricultural company, with malicious software to compromise their operations. The attack has impacted Spain #Spain.
Incident Details
- Victim: Avance Agricola sl
- Country: ES
- Actor: safepay
- Source: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion#avance
- Discovered: 2025-05-29 22:19:56.907905
- Published: 2025-05-29 22:18:41.437498
Information
- Ransomware attack targeted a Spain-based agricultural company.
- The victim, Avance Agricola SL, specializes in the cultivation and distribution of fruits and vegetables.
- The company practices advanced farming techniques over a large agricultural area.
- Their produce includes pomegranates, apricots, and a diverse range of vegetables.
- The actor behind the ransomware attack is identified as SafePay.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.