Embargo is a Rust-based ransomware-as-a-service group targeting US transportation and energy sectors.
Embargo is a Rust-based ransomware-as-a-service group that emerged in April 2024. The group primarily targets transportation and energy & utilities sectors in the United States. They employ double extortion tactics and are assessed as a potential successor to BlackCat/ALPHV. Defenders should focus on detecting Rust-based ransomware samples, monitoring data leak sites, and strengthening defenses against phishing campaigns targeting industrial sectors.
Embargo is a Rust-based ransomware-as-a-service group that emerged in April 2024, primarily targeting US healthcare, manufacturing, and business services organizations using double extortion, assessed as a potential successor to BlackCat/ALPHV with over $34 million in ransom proceeds.
Embargo employs double extortion tactics.
Embargo is assessed as a potential successor to BlackCat/ALPHV.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.