embargo Ransomware
Tracked since Apr 21, 2024
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
In MITRE ATT&CK MITRE ATT&CK
Ransomware cataloged as Embargo (S1247)
Used by: Storm-0501 G1053
Embargo is a Rust-based ransomware-as-a-service group that emerged in April 2024, primarily targeting US healthcare, manufacturing, and business services organizations using double extortion, assessed as a potential successor to BlackCat/ALPHV with over $34 million in ransom proceeds.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Defense Evasion
s4killer (Minifilter Driver)
LOLBAS
BCDEdit · ServiceControl (sc.exe)
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live