Sabbath Ransomware (28134511-b91e-4b69-962d-74e80ac6305b)
54bb47h ("Sabbath") refers to the branding used by a ransomware operation in 2021. UNC2190 (aka Storm-0501) actors, who have leveraged a considerable number of distinct ransomware families, were observed deploying Sabbath ransomware during attacks on critical infrastructure organizations from June through at least October of that year.[Mandiant Sabbath Ransomware November 29 2021]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Storm-0501 (de72d564-6487-4cf3-be3e-0a961cf15d5d) | Tidal Groups | Sabbath Ransomware (28134511-b91e-4b69-962d-74e80ac6305b) | Tidal Software | 1 |