Embargo
Embargo is a ransomware group with a financial motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 16 countries, including the United States and the United Kingdom. It uses 15 MITRE ATT&CK techniques.
- Techniques
- 15
- Exploited CVEs
- No CVE data
- First seen
- Apr 17, 2024
- Last seen
- Jun 30, 2026
- Record updated
Who They Target.
Sectors · 14
Countries · 16
Labelsdouble-extortionembargomdeployerms4killerraasransomwarerust-ransomwarestorm-0501-context
About Embargo.
Embargo is a Rust-based ransomware-as-a-service group that emerged in April 2024, primarily targeting US healthcare, manufacturing, and business services organizations using double extortion, assessed as a potential successor to BlackCat/ALPHV with over $34 million in ransom proceeds.
Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.