Sabbath
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:50:37
Targeted industries: government-and-public-sector healthcare-and-pharmaceutical
Targeted regions: country_code:us country_code:gb
Context
Sabbath is a ransomware family known for targeting government and healthcare sectors primarily in the US and UK. It encrypts victims' files and demands a ransom payment for file decryption.
Used by threat actors
- Storm-0501 Hybrid Cloud Compromise (campaign)
- UNC2190 2021 Ransomware Activity (campaign)
Reports & references
- Mandiant — Sabbath Ransomware Affiliate (report)
- ransomlook.io — Sabbath (report)