eruption

First seen
2021-12-01 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 13:58:17

Targeted industries: healthcare-and-pharmaceutical government-and-public-sector technology-and-telecommunications

Targeted regions: country_code:us country_code:ca

Context

Eruption is a ransomware that has been rebranded to Sabbath. It primarily targets sectors with critical infrastructure, aiming for high-profile industries.

Used by threat actors

  • UNC2190 2021 Ransomware Activity (campaign)

Reports & references

  • ransomlook.io — Eruption (report)

External references