logo

Embargo ransomware gang has handled at least $34 million in about a year, report says

ID: 1373f383-1cc5-561a-9c5f-fd0bd9e3f514

STIX ID: report--1373f383-1cc5-561a-9c5f-fd0bd9e3f514

Feed Name: The Record from Recorded Future News

Threat Score
72/100

Date Published: 2025-08-08

Date Updated: 2026-05-01

...
...

TRM Labs reports that the Embargo ransomware group emerged in mid‑2024 and is likely a rebrand or successor to BlackCat/ALPHV; the gang has moved roughly $34.2M in cryptocurrency, targets sectors including healthcare and manufacturing, operates as a ransomware‑as‑a‑service while retaining core infrastructure and payment control, and is described as technically capable though less overt than larger groups.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.