Back to Threat Groups

sabbath

ransomware group

Sabbath (also known as 54BB47h, operated by UNC2190) is a ransomware group active from mid-2021 that emerged as a rebran

Victims
19
records
First Discovered
Nov 22, 2021
victim
Last Discovered
Feb 22, 2026
victim
Inactive Since
174
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
2
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Victims (19)

For abuse please contact: theflame [AT] kaspersky [dot] com

sabbath
Feb 22, 2026
Published
54bb47h.blog

Thisis a research system operated by Kaspersky Lab

sabbath
Feb 22, 2026

For more information please visit: www.kaspersky.com www.securelist.com For abuse please contact: theflame [AT] kaspersky [dot] com

1.0Published
kaspersky.com

aria-label=Google>

sabbath
Feb 28, 2022
1.0Published

JALEEL TRADERS LLC

sabbath🇦🇺 AU
Jan 15, 2022
Manufacturing1.0Published

ASL Napoli 3 Sud Network Seized

sabbath
Jan 14, 2022
Healthcare1.0Published

Protected: PRIVATE POST ITALY

sabbath
Jan 12, 2022
1.0Published

Summit College

sabbath
Jan 4, 2022
Education1.0Published

Close drawer

sabbath
Jan 4, 2022
1.0Published

Close search modal

sabbath
Jan 4, 2022
1.0Published

TRIGYN 2 0 | Data Leak

sabbath
Dec 28, 2021
Technology1.0Published

Prenax

sabbath
Dec 20, 2021
1.0Published

Social Enterprise

sabbath
Dec 12, 2021
Business Services1.0Published

Trigyn Technologies Ltd

sabbath
Dec 10, 2021
Technology1.0Published

Flagship

sabbath
Nov 22, 2021
Consumer Services1.0Published

Stoningtonschools

sabbath
Nov 22, 2021
Education1.0Published

AISD

sabbath
Nov 22, 2021
Education1.0Published

Starline

sabbath
Nov 22, 2021
Manufacturing1.0Published

RocTechnologies

sabbath
Nov 22, 2021
Technology1.0Published

MCP Services LLC

sabbath🇺🇸 US
Nov 22, 2021
Other1.0Published
gerberchildrenswear.com

Infrastructure

leak_site
ONLINE
http://54bb47h.blog

274ms

3d ago

leak site
OFFLINE

unreachable

http://54bb47h5qu4k7l4d7v5ix3i6ak6elysn3net4by4ihmvrhu7cvbskoqd.onion/blog

2935ms

12h ago