Sarcoma

Active

Sarcoma is a ransomware group that debuted in October 2024, immediately ranking among the top three most active groups globally and surpassing 116 documented victims by mid-2025, targeting mid-market companies across manufacturing, retail, healthcare, legal, and business services with roughly 50% of victims in the United States.

144 Victims

Jul 8, 2024 First Discovered

Oct 31, 2026 Last Discovered

0 Days Inactive

0% Infostealer

1/1 Sites Online

Known Locations (1)

Sarcoma Group

sarcomawmawlhov7o5mdhz4eszxxlkyaoiyiy2b5iwxnds2dmb4jakad.onion

Tools Used

DiscoveryEnum

Advanced IP Scanner

Victims (144)

Detailed victim list temporarily unavailable

This group has 144 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.