Ransomware Group: SAFEPAY

VICTIM NAME: greyform[.]sg

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page concerning Greyform Pte Ltd, a construction company based in Singapore, details a data breach resulting from a cyber incident. The group claiming responsibility for the attack is known as ‘safepay’. Though specifics regarding employee or user data compromises are not reported, the presence of a ransomware group indicates potential vulnerabilities within the company’s operations. The construction sector often handles significant data, emphasizing the importance of robust cybersecurity measures. The leak page was published on January 15, 2025, and presents information relevant to stakeholders and the general public.

The description on the leak page highlights Greyform’s focus on prefab construction methods, incorporating sustainability and innovation into their projects. This approach not only optimizes construction timelines but also aligns with contemporary demands for efficient building solutions. The inclusion of a screenshot on the leak page suggests visual content of internal documents or operational insights, which could potentially expose more about the company’s internal practices. However, no specific download links or sensitive documents were enumerated. As the threat landscape evolves, this incident serves as a reminder for companies within the construction industry to enhance their cybersecurity practices actively.