Ransomware Group
Sarcoma
Sarcoma is a ransomware group that debuted in October 2024, immediately ranking among the top three most active groups globally and surpassing 116 documented victims by mid-2025, targeting mid-market companies across manufacturing, retail, healthcare, legal, and business services with roughly 50% of victims in the United States.
Known victims142
Threat level
HIGH
Get an alert if one of your domains is named on a ransomware leak site.
Monitor your domainsFree account · up to 5 monitored targets
Tactics, Techniques & Procedures (TTPs)
DiscoveryEnum
- Advanced IP Scanner
Known infrastructure
The following Tor hidden services have been associated with this group:
Sarcoma Group
These sites are malicious. Open them only from an isolated environment.
Check if you’re affected
Look up your domain to see whether it appears on Sarcoma’s victim list.
Try it nowFree⌘K
Try
risk score · threat categories · sources · age · confidence — in one request