Japan

sarcoma

Sarcoma is a ransomware group that debuted in October 2024, immediately ranking among the top three most active groups globally and surpassing 116 documented victims by mid-2025, targeting mid-market companies across manufacturing, retail, healthcare, legal, and business services with roughly 50% of victims in the United States.

First seen 2024-07-09 · Last seen 2026-03-30 · 2 Japan claims

Tactics: Initial Access, Persistence, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Exfiltration, Command and Control, Impact

Cached from ransomware.live. 2026-10-01 PT. Leak sites are not linked.