Embargo ransomware: Rock’n’Rust

ESET details an active ransomware campaign by the Embargo group that uses Rust-written tooling (MDeployer and MS4Killer) to disable endpoint security (via Safe Mode abuse and BYOVD with an embedded vulnerable driver) and deploy a Rust-based ransomware payload; the report provides technical analysis, observed behaviors, IoCs (hashes, file paths, commands, certificate), and MITRE ATT&CK mappings to support detection and response.