Ransom! wta-inc.com

The ransomware claim alleges that safepay targeted WTA-Inc.com, a US-based travel company, with malicious encryption activities aiming to disrupt their personalized travel services. The incident impacts the United States.

Incident Details

  • Victim: wta-inc.com
  • Country: US
  • Actor: safepay
  • Source: http://j3dp6okmaklajrsk6zljl5sfa2vpui7j2w6cwmhmmqhab6frdfbphhid.onion#wta
  • Discovered: 2025-07-26 20:49:00.435249
  • Published: 2025-07-26 20:47:53.276987

Information

  • Worldwide Travel Adventures, Inc. (WTASi) is a global travel agency specializing in customized travel packages.
  • The company caters to independent travelers seeking personalized travel experiences.
  • WTASi offers destination expertise and tailors travel services to exotic locations worldwide.
  • The services provided include accommodation arrangements, flight bookings, ground transportation, and exclusive tours.
  • WTASi is recognized for its in-depth knowledge of various destinations and its personalized service approach.

Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live