Sarcoma

Active
Sarcoma is a ransomware group that debuted in October 2024, immediately ranking among the top three most active groups globally and surpassing 116 documented victims by mid-2025, targeting mid-market companies across manufacturing, retail, healthcare, legal, and business services with roughly 50% of victims in the United States.
141 Victims
Jul 8, 2024 First Discovered
Mar 30, 2026 Last Discovered
170 Days Inactive
0% Infostealer
1/1 Sites Online
Known Locations (1)
Sarcoma Group
sarcomawmawlhov7o5mdhz4eszxxlkyaoiyiy2b5iwxnds2dmb4jakad.onion
Tools Used
DiscoveryEnum
Advanced IP Scanner
Victims (141)

Detailed victim list temporarily unavailable

This group has 141 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.