Skip to content
brandefense.io
Request A Demo
RansomwareFinancialModerate sophistication · Organisation

Sarcoma

Sarcoma is a ransomware group with a financial motive, tracked by Brandefense. It targets 16 sectors, including Government and Technology, in 37 countries, including the United States and the United Kingdom. It uses 3 MITRE ATT&CK techniques.

Also known as
  • Sarcoma Ransomware Group
Request IOC feedRequest ATT&CK export
Techniques
3
Exploited CVEs
No CVE data
First seen
Oct 1, 2024
Last seen
May 1, 2025
Record updated

Who They Target.

Sectors · 16
Countries · 37
Labelsglobalransomware

About Sarcoma.

Sarcoma is a ransomware group that debuted in October 2024, immediately ranking among the top three most active groups globally and surpassing 116 documented victims by mid-2025, targeting mid-market companies across manufacturing, retail, healthcare, legal, and business services with roughly 50% of victims in the United States.

Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.