CASE STUDIES

Sarcoma is a criminal ransomware group that breaks into company networks, steals sensitive data, encrypts all the files so the business cannot operate, and then demands a payment to restore access. If the company refuses to pay, Sarcoma publishes the stolen data on a public dark web website for anyone to download -including competitors, journalists, and regulators. The group first appeared in October 2024 and immediately became one of the most active ransomware gangs in the w

The Clop ransomware group also written as Cl0p is one of the most consequential cyber-extortion actors of the last decade, not because of technical novelty, but because of how deliberately it reshaped the ransomware business model.