Ransomware Group: SAFEPAY

VICTIM NAME: motomecanica[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page concerning Motomecanica.com highlights the company’s significant expertise in providing high-quality main propulsion equipment and deck machinery for ships. Descriptions note that the company implements rigorous quality checks and innovative designs, ensuring their products are reliable and efficient. This facilitates their service to a diverse client base, including those within naval markets. The leaked data also indicates the nature of their product range, which encompasses gearboxes, winches, hydraulic systems, and other maritime components, indicating a strong foothold in the maritime industry.

The post detailing this ransomware incident was published on March 11, 2025, with relevant extracts mentioning various statistics associated with user accounts and infostealer activity. Notably, a total of 4 users were affected, and the leak page denotes the presence of the RedLine and StealC infostealers. Additionally, no sensitive information like employee or third-party details has been disclosed. While no specific download links or images were present in the report, the absence of explicit data leaks ensures that the information remains professional and sanitized.