← Back to Ransomware Chk

Sabbath

Inactive
Sabbath (also known as 54BB47h, operated by UNC2190) is a ransomware group active from mid-2021 that emerged as a rebrand of the Arcane ransomware, targeting critical infrastructure in the US and Canada — particularly hospitals, schools, and natural resources — using double extortion, backup destruction, and affiliate recruitment on Russian-language dark web forums.
17 Victims
Nov 22, 2021 First Discovered
Feb 28, 2022 Last Discovered
1525 Days Inactive
0% Infostealer
0/2 Sites Online
Top Sectors
Education 3
Technology 3
Business Services 2
Agriculture and Food Production 1
Consumer Services 1
Manufacturing 1
Known Locations (2)
54bb47h.blog
BLOG
54bb47h5qu4k7l4d7v5ix3i6ak6elysn3net4by4ihmvrhu7cvbskoqd.onion
Victims (17)
aria-label=Google>
Discovered: Feb 28, 2022 · Attack est.: Feb 28, 2022
JALEEL TRADERS LLC
Agriculture and Food Production Discovered: Jan 15, 2022 · Attack est.: Jan 15, 2022
ASL Napoli 3 Sud Network Seized
Discovered: Jan 14, 2022 · Attack est.: Jan 14, 2022
Protected: PRIVATE POST ITALY
Discovered: Jan 12, 2022 · Attack est.: Jan 12, 2022
Summit College
Education Discovered: Jan 4, 2022 · Attack est.: Jan 4, 2022
Close drawer
Discovered: Jan 4, 2022 · Attack est.: Jan 4, 2022
Close search modal
Discovered: Jan 4, 2022 · Attack est.: Jan 4, 2022
TRIGYN 2 0 | Data Leak
Technology Discovered: Dec 28, 2021 · Attack est.: Dec 28, 2021
Prenax
Discovered: Dec 20, 2021 · Attack est.: Dec 20, 2021
Social Enterprise (SEC)
Business Services Discovered: Dec 12, 2021 · Attack est.: Dec 12, 2021
Trigyn Technologies Ltd
Technology Discovered: Dec 10, 2021 · Attack est.: Dec 10, 2021
Flagship
Consumer Services Discovered: Nov 22, 2021 · Attack est.: Nov 22, 2021
Stoningtonschools
Education Discovered: Nov 22, 2021 · Attack est.: Nov 22, 2021
AISD
Education Discovered: Nov 22, 2021 · Attack est.: Nov 22, 2021
Starline
Manufacturing Discovered: Nov 22, 2021 · Attack est.: Nov 22, 2021
RocTechnologies
Technology Discovered: Nov 22, 2021 · Attack est.: Nov 22, 2021
MCP Services LLC
Business Services Discovered: Nov 22, 2021 · Attack est.: Nov 22, 2021
Source: Ransomware.live | Data cached and served by Digital Checkmark IT Services | Ransomware Chk