CVE Intelligence

embargo Ransomware

🔔 Create alert

Tracked since Apr 21, 2024

0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity

In MITRE ATT&CK MITRE ATT&CK

Ransomware cataloged as Embargo (S1247)

Embargo is a Rust-based ransomware-as-a-service group that emerged in April 2024, primarily targeting US healthcare, manufacturing, and business services organizations using double extortion, assessed as a potential successor to BlackCat/ALPHV with over $34 million in ransom proceeds.

Vulnerabilities cited for this group

CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.

No CVE associated with this group in the sources.

Observed tools

Defense Evasion
s4killer (Minifilter Driver)
LOLBAS
BCDEdit · ServiceControl (sc.exe)

Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live