Ransomware Group: SAFEPAY

VICTIM NAME: semesco[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the SAFEPAY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

On January 21, 2025, a ransomware leak page was identified linking to semesco.com, an e-commerce platform based in Cyprus. This platform facilitates the buying and selling of a wide range of products, including electronics, clothing, beauty products, and household items. Semesco operates by ensuring a secure online shopping experience for its users, along with providing delivery services. The platform aims to promote local brands and businesses, enhancing overall user engagement through improved website usability and customer service.

The incident appears to have been attributed to a group known as “safepay.” Although specific details regarding the impact on employees or user information appear to be unspecified, the platform continues to update its features and security measures. The last recorded update before the leak was on February 25, 2024. No third-party compromises or employee details were disclosed in conjunction with this leak. The original post was identified on the dark web, indicating the potential risk posed by this cyber event.