Back to Threat Groups

sabbath

INACTIVE

ransomware group

Sabbath (also known as 54BB47h, operated by UNC2190) is a ransomware group active from mid-2021 that emerged as a rebran

Victims
19
records
First Discovered
Nov 22, 2021
victim
Last Discovered
Feb 22, 2026
victim
Inactive Since
219
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Oct
2025
Nov
2025
Dec
2025
Jan
2026
2
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026

Infrastructure

leak_site
OFFLINE

unreachable

http://54bb47h.blog

20124ms

1d ago

leak site
OFFLINE

unreachable

http://54bb47h5qu4k7l4d7v5ix3i6ak6elysn3net4by4ihmvrhu7cvbskoqd.onion/blog

6770ms

21h ago