Ransomware Group

Sarcoma

Status: active • First seen 2024-1035+ known victims

Sarcoma attacks hospitals and drug companies by using security bugs right after they become public. They race to attack before companies can install the patches.

Overview

Sarcoma focuses on healthcare and pharmaceutical targets, exploiting recently disclosed vulnerabilities (n-day exploits) before organizations can patch.

Target Industries

Healthcare, Pharmaceuticals, Biotech, Research

How They Attack

  • N-day exploitation
  • Healthcare focus
  • Double extortion
  • Rapid exploitation

Notable Victims

Healthcare networks (2024), Pharmaceutical companies

Is your business exposed?

How to Protect Against Sarcoma

  1. 1.

    Implement rapid patching for healthcare

  2. 2.

    Subscribe to vulnerability intelligence

  3. 3.

    Protect research data with encryption

MITRE ATT&CK Techniques

T1190, T1486, T1567, T1078

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required