SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion.