Researchers at Mandiant have recently reported that a new ransomware group calling itself Sabbath appears to be the rebranded group Arcane and “picked up their pace” in November . Arcane has been known to target hospitals and schools.

The researchers identified the group in October after it attacked a Texas school district, held its data for ransom, and requested the ransom through Reddit instead of its own website.  It then launched a website that appeared almost identical to that of Arcane. According to Mandiant, Sabbath has added six additional victims to its extortion website in the past few days.

Although Mandiant reported Sabbath’s activity to the cloud hosting provider to disrupt its operations, this illustrates that the proliferation of ransomware groups and the sale of techniques continue to make ransomware a serious threat.