Back to Threat Groups

embargo

Ransomware-as-a-Service

ransomware group

🇷🇺Russia

Embargo is a ransomware-as-a-service operation that emerged in mid-2024, utilizing Rust-based encryptors for both Windows and VMware ESXi environments. The group offers affiliates a custom toolkit including a safe mode rebooter and EDR killer. Embargo has been linked by some researchers to possible connections with the Scattered Spider threat cluster based on TTPs, though this attribution remains uncertain.

Victims
42
records
First Discovered
Apr 21, 2024
victim
Last Discovered
Sep 10, 2026
victim
Inactive Since
65
days
Countries
15
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
1
Dec
2025
Jan
2026
Feb
2026
6
Mar
2026
3
Apr
2026
May
2026
1
Jun
2026
Jul
2026
Aug
2026
1
Sep
2026
Oct
2026
Nov
2026

Victims (42)

gardensalive.com, bitsandpieces.com, iselinursery.local, weeksroses.org, esm.local

embargo🇺🇸 US
Sep 10, 2026

ALL DATA AVAILABLE gardensalive.com, bitsandpieces.com, iselinursery.local, weeksroses.org, esm.local Gardens Alive, Inc. is a privately held U.S. consumer good...

Agriculture and Food Production2 TB1.0Published
gardensalive.com

Auburn Electrical Construction Company

embargo🇺🇸 US
Jun 9, 2026

ALL DATA AVAILABLE

Hospitality and Tourism5 TB1.0Published
maytrucking.com

Heart of America Medical Centr

embargo🇨🇦 CA
Apr 26, 2026

ALL DATA AVAILABLE

Healthcare800GB1.0Published
heartofamericamedicalcenter.org

chipsoft.com

embargo
Apr 23, 2026

ChipSoft provides innovative software solutions for healthcare institutions, aimed at reducing administrative burdens and enhancing the quality of care. Their e...

1.0Published
chipsoft.com

cipsoft.com

embargo
Apr 20, 2026

Dutch healthcare software provider ChipSoft is currently responding to a major April 2026 ransomware attack that resulted in stolen patient data and disrupted s...

7.0Published
cipsoft.com

ludlums.com

embargo🇺🇸 US
Mar 26, 2026

ALL DATA AVAILABLE

Technology5 TB7.0Published
ludlums.com

ALL DATA AVAILABLE

embargo
Mar 18, 2026
Published

westport.com

embargo🇺🇸 US
Mar 14, 2026

ALL DATA AVAILABLE

Technology1.8 TB2.0Published
westport.com

seclore.com

embargo🇮🇳 IN
Mar 11, 2026

At Seclore, we believe that cybersecurity should revolve around what matters most—your data. Traditional security perimeters are no longer enough in today’s hyp...

Technology1.3 TB2.0Published
seclore.com

ubm.hu

embargo🇭🇺 HU
Mar 11, 2026

ALL DATA AVAILABLE

Technology300 GB5.0Published
ubm.hu

nch.com

embargo🇺🇸 US
Mar 9, 2026

ALL DATA AVAILABLE

Technology7.3 TB2.0Published
nch.com

lso.com

embargo🇱🇸 LS
Dec 6, 2025

ALL DATA AVAILABLE

Transportation/Logistics500 GB1.0Published
lso.com

ACTi.com

embargo🇹🇼 TW
Oct 22, 2025

ALL DATA AVAILABLE

Technology1.5 TB1.0Published
acti.com

usadebusk.com

embargo🇺🇸 US
Sep 20, 2025

ALL DATA AVAILABLE

Business Services...2 TB6.0Published
usadebusk.com

hawaiiunified.com

embargo🇺🇸 US
Jun 24, 2025

HAWAI'I UNIFIED is a licensed General Contractor, Electrical Contractor, Plumbing Contractor, Steel Door Contractor, and Fencing Contractor providing services t...

Telecommunication65 GB1.0Published
hawaiiunified.com

rotaryeng.com.sg

embargo🇸🇬 SG
Jun 10, 2025

Founded in 1972, Rotary is one of the region’s leading oil and gas infrastructure services companies with extensive international experience offering fully inte...

Manufacturing3.0Published
rotaryeng.com.sg

allstarflooring.com

embargo🇺🇸 US
May 30, 2025

All Star Flooring, Inc. is a leading provider of commercial flooring solutions with over 35 years of experience serving the Washington Metropolitan Area, includ...

Manufacturing140 GB3.0Published
allstarflooring.com

M&H Electric Fabricators

embargo🇺🇸 US
May 30, 2025

Welcome to M&H Electric Fabricators, where we've been sparking innovation and powering up the automotive electric industry since 1985. Our experience and commit...

Manufacturing220 GB3.0Published
mhelectricfabricators.com

Kingsmen Creatives Ltd.

embargo🇸🇬 SG
May 14, 2025

Kingsmen Creatives designs roll-out retail environments based off their clients' needs and conceptualize events for their clients. Established in 1976 and headq...

Business Services1.0Published
kingsmen-int.com

rixos.com

embargo🇹🇷 TR
Mar 14, 2025

Founded in 2000 and headquartered in Dubai, United Arab Emirates, Rixos Hotels is a Turkish luxury hotel chain. The company operates hotels and resorts across E...

Hospitality and Tourism1.8 TB5.0Published
rixos.com

Insider Technologies Limited

embargo🇬🇧 GB
Mar 9, 2025

Based in Manchester, Great Britain, Insider technologies is a leading provider of big data, predictive software security solutions to the banking and payments i...

Technology1.0Published
insidertech.co.uk

tequaly.com

embargo🇧🇷 BR
Feb 25, 2025

One of Brazil's largest suppliers of technological systems, maintenance, manufacturing, assembly and services for industries in various segments, which has been...

Technology6.0Published
tequaly.com

myhscu.com

embargo🇺🇸 US
Feb 17, 2025

Heritage South Credit Union was originally chartered in 1937 as the Avondale Employees Federal Credit Union. After many years and a couple of name changes, Heri...

Financial Services300 GB7.0Published
myhscu.com

annegrady.org

embargo🇺🇸 US2 groups: ransomhub
Feb 16, 2025

Anne Grady Services provides a vast array of assistance for adults and children with intellectual disabilities. - Anne Grady Services provides a vast array of a...

Healthcare2.0Published
annegrady.org

Heritage South Credit Union

embargo🇺🇸 US
Feb 14, 2025

Heritage South Credit Union was originally chartered in 1937 as the Avondale Employees Federal Credit Union. After many years and a couple of name changes, Heri...

Financial Services300 GB7.0Published
myhsu.com

alansarioman.com

embargo🇴🇲 OM
Jan 9, 2025

Al Ansari is a provider of integrated building, infrastructure and engineering solutions. The group was established in 1975 in response to the growing needs of ...

Financial1 TB1.0Published
alansarioman.com

backyarddiscovery.com

embargo🇺🇸 US
Nov 30, 2024

Backyard Discovery is built for families. From a child’s first playset to structures that guard the parents’ newest outdoor interests, our products are meant to...

Manufacturing1 TB1.0Published
backyarddiscovery.com

American Associated Pharmacies

embargo🇺🇸 US
Nov 13, 2024

American Associated Pharmacies (AAP) is a member-owned cooperative of over 2,000 independent pharmacies working together as a cohesive network. AAP in partnersh...

Healthcare1.469 TB5.0Published
aapnet.com

wexfordcounty.org

embargo🇯🇴 JO
Nov 5, 2024

Located in Northern Lower Michigan, Wexford County boasts a population of approximately 35,000, with a combination of an industrial/recreational demographic bas...

Government1 TB4.0Published
wexfordcounty.org

mh-m.org

embargo🇺🇸 US
Nov 5, 2024

Memorial Hospital and Manor celebrated its 50th Anniversary in 2010. Memorial Hospital was officially dedicated on Sunday, April 3, 1960, and opened its doors t...

Healthcare1.15 TB1.0Published
mh-m.org

Memorial Hospital & Manor

embargo🇺🇸 US
Nov 5, 2024

Memorial Hospital and Manor celebrated its 50th Anniversary in 2010. Memorial Hospital was officially dedicated on Sunday, April 3, 1960, and opened its doors t...

Healthcare1.15 TB1.0Published
mh-m.org

weisermemorialhospital.org

embargo🇺🇸 US
Sep 30, 2024

ALL DATA AVAILABLE

Healthcare...200 GB1.0Published
weisermemorialhospital.org

pioneerworldwide.com

embargo🇺🇸 US
Jul 26, 2024

Founded in 1917, Pioneer Balloon Company is the world's premier manufacturer of latex balloons, with a diversified range of products that includes Microfoil® ba...

Technology1.65 TB2.0Published
pioneerworldwide.com

summervillepolice.com

embargo🇺🇸 US
Jul 26, 2024

ALL DATA AVAILABLE

Government...1.71 TB1.0Published
summervillepolice.com

diligentusa.com

embargo
Jul 11, 2024

Diligent Delivery Systems provides transportation services for businesses within varying industries. Major clients include WorldPac and PharMerica. The company ...

Business Services5.0Published
diligentusa.com

gerard-perrier.com

embargo🇫🇷 FR
Jul 4, 2024

Gerard Perrier Industrie SA is a France-based company that provides electrical and electronic automation solutions to industry including design and manufacturin...

Manufacturing1.0Published
gerard-perrier.com

dmedelivers.com

embargo🇺🇸 US
Jun 6, 2024

Marketing, Printing, Logistics - 1 TB+ databases, source code, client files

Healthcare1 TB5.0Published
dmedelivers.com

shamrocktradingcorp.com

embargo🇺🇸 US
May 21, 2024

Shamrock Trading Corporation is the parent company for a family of brands in transportation services, finance and technology. The company offers transportation ...

Transportation/Logistics1.0Published
shamrocktradingcorp.com

orga-soft.de

embargo🇩🇪 DE
May 17, 2024

Software Development - SQL BASES AND SOURCES 650 GB, LINK WILL BE AVAILABLE SOON

Technology650 GB1.0Published
orga-soft.de

rexmoore.com

embargo🇺🇸 US
May 8, 2024

Founded in 1922 and headquartered in Sacramento, California, Rex Moore is a family-owned and managed company, providing electrical and integrated systems engine...

Business Services5.0Published
rexmoore.com

firstmac.com.au

embargo🇦🇺 AU
Apr 30, 2024

Firstmac Limited is an Australian owned company with experience in home and investment loans. They have a range of market insurance products backed by internati...

Financial6.0Published
firstmac.com.au

mulfordconstruction.com

embargo🇺🇸 US
Apr 21, 2024

Heavy Civil Contracting, Earthwork and Utilities - 2 TB data will be disclosed soon

Business Services2 TB1.0Published
mulfordconstruction.com

Infrastructure

leak site
ONLINE
http://fvbobs6fcm5lske2xhfyx5sazn3i5cbxrbdyozoio23ouhnmortg5fyd.onion/

4416ms

7d ago

leak site
OFFLINE

unreachable

http://clqt3b3ldzxyemjrkvgsm5so2tyus7f7i2ia5qvikt4623srq5w3d7ad.onion/

8888ms

2d ago

leak site
OFFLINE

unreachable

http://ufjoe7fdwvml52oin7flwlqksvp3fcvfyh2kwsngt7j2yf7xou52w2qd.onion/

8245ms

17d ago

leak site
OFFLINE

unreachable

http://3kt5ouf4qxdkuzsct6zp3jxsqmtaqjsun3uvfdwbeuo2yizjp73ripyd.onion/

2207ms

Oct 11, 2026

leak site
OFFLINE

unreachable

https://2nn4b6gihz5bttzabjegune3blwktad2zmy77fwutvvrxxodbufo6qid.onion/

4888ms

10d ago

leak site
OFFLINE

unreachable

http://rngjexyyyl5mek5kg2lkxilqfef5nr6bpa4u24i5ei5hb3ydsh5drpid.onion/

2531ms

21d ago

leak site
OFFLINE

unreachable

http://sbjthwyoxfuxq75b77e2hsj7ie67m3qicfnuikhuabwo3sikvrzyaxad.onion/

2671ms

19d ago

leak site
OFFLINE

unreachable

http://zo5xog4vpvdae473doneepetidh36m5czdq2vyeiq3lvqhuel56p6nid.onion/

5360ms

11d ago

leak site
OFFLINE

unreachable

http://tamvd5fdyvpekhaf2sdg5sum73ra2abc4h2iqihijpvw4hythnlmuhid.onion/

6141ms

18d ago

leak site
OFFLINE

unreachable

http://olpvpdu4dotl54dereuembantzyjqzftjqj2ovvlfgcvw23qknuxzjad.onion/

6295ms

25d ago

leak site
OFFLINE

unreachable

http://y6kyfs2unbfcyodzjrxadn4w5vyulhyotdi5dtiqulxbduujehupunqd.onion/

6251ms

14d ago

leak site
OFFLINE

unreachable

http://qrthxx5hkttfl3pk57eou6ddqi34pxsibxvndq7vt5pblqbaurkmxbqd.onion/

1231ms

23d ago

leak site
OFFLINE

unreachable

http://22g3uiuyqqa4txxuyvzmlyvlou4crrgfvgnvodrv3wrxcedtvjgx6aid.onion/

4514ms

Oct 10, 2026

leak site
OFFLINE

unreachable

http://jolfnfw6lmcjsppgjfimhimqt2t7viybk67yc5zkxip6fxrcgo7mv4id.onion/

2376ms

29d ago

leak site
OFFLINE

unreachable

http://yj3eozlkkxkcsprc2fug7tolgtnllruyavuyyar3yzsccjdgvu2bl2yd.onion/

4300ms

13d ago

leak site
OFFLINE

unreachable

http://n56t64ldkhzygjk5cqa2f3r4xxjqzaftusjy56z25qcnun6ab4cijeqd.onion/

3655ms

27d ago

leak site
OFFLINE

unreachable

http://kk3puzzmu6jfzll6sllchr5olxf4bg4tl7uyq7wtiqqpntkreya3qxqd.onion

8965ms

28d ago

leak site
OFFLINE

unreachable

http://s37weqmxusvfcxkoorgkut5v7frn27zftdb6pdjsyjl5djg6oxjqjbid.onion/

2861ms

20d ago

leak site
OFFLINE

unreachable

http://orxo6qmizqa43suoox3xteu6645y4zf2bpvnsutb2yq3n2lpprw2x7yd.onion/

8368ms

24d ago

leak site
OFFLINE

unreachable

http://i2okedfryhllg6ka6aur3wnxcxdaufbuuysp4drr5xoc6gvqpcogejid.onion/

8179ms

Oct 15, 2026

leak site
OFFLINE

unreachable

http://usu2gxoiijvnswhfymd6ucjjwhtgqby4c4ywzvnrtw4i6mpgppvzpsad.onion/

3896ms

16d ago

leak site
OFFLINE

unreachable

http://vh2wkazjlflm6pvwtvw2fnztu3dcw4346lasvikzeg25yhx6bjvl5pqd.onion/

3246ms

15d ago

leak site
OFFLINE

irrelevant

http://gvhj726josrtcuig76yfme5x72d7xqbevgsqm26ua3qcmskxddnx3oid.onion/

2355ms

Sep 29, 2026

leak site
OFFLINE

unreachable

http://rlseptkjo5yt2c3m4ov7hmhxmb2uia3cic3ohq2u5tmb2uv4enovhfid.onion/

8465ms

22d ago

leak site
OFFLINE

unreachable

http://g7hva5likuonhljhh3sp2nvg7pezpu45vpxjccgihevwpb4fi2napqad.onion/

988ms

Oct 14, 2026

leak site
OFFLINE

unreachable

http://z2b75lk7xf6kme3zfvlmdmpwiaansnkcuhsojd23dgub5md24fhogcyd.onion/

2721ms

12d ago

leak site
OFFLINE

unreachable

http://oftm4u5cfl6wyadj27h3csdxfvyd7favssxcr7l7wnswdsrfedxswxqd.onion/

8951ms

26d ago

leak site
OFFLINE

unreachable

http://ec6edgevw2lzqy4ipafpbvjuu7r6ugqbljqokl3pvecc6c3a5ix3wgyd.onion/

8637ms

25d ago

leak site
OFFLINE

unreachable

http://dr4zejrunmmijebc4jhz6xwplapeltdqdchvbvikiwitvrtjedcezmad.onion/

8662ms

3d ago

leak site
OFFLINE

unreachable

http://3o5ewrzhqoyodfs5kll4cjxagdfrpuu474panwobm4im7ejfpaux5jyd.onion/

2807ms

Oct 13, 2026

leak site
OFFLINE

unreachable

http://5ntlvn7lmkezscee2vhatjaigkcu2rzj3bwhqaz32snmqc4jha3gcjad.onion/

8985ms

6d ago

leak site
OFFLINE

unreachable

http://fanr4dyego253yx5pmbc7krct6qzq3hqfrchvj5fafiwalvjijfgsmid.onion/

8976ms

3d ago

leak site
OFFLINE

unreachable

http://7watkqnnuwxvlpgy5gaosgqy67nve3jgpy37xobqngmswz3vuvde56yd.onion/

8894ms

4d ago

leak site
OFFLINE

unreachable

http://7t635vqx6zm733ryjj5jm6hnavlw2it3umi3zmbq6gd6nhaeaylsbsyd.onion/

8745ms

5d ago

leak site
OFFLINE

unreachable

http://6cs2fy7brjjx3fza7ny2vyhbkaxtn6rdx4p4js2lbgyhke7z4aslxtid.onion/

1855ms

4d ago

leak site
OFFLINE

unreachable

http://7lxwbzlkpjyuahuvngwwkc4mycj2a4flh45ksqjo2ezfdbkmxmlxikad.onion/

8973ms

6d ago

leak site
OFFLINE

unreachable

http://76yl7gfmz2kkjglcevxps4tleyeqnqhfcxh6rnstxj27oxhoxird3hyd.onion

8114ms

9d ago

leak site
OFFLINE

unreachable

http://yunznlzrpp7oa45og6unujpp4t3f4m2sqh2b4vuhct3kmbxxj6lwqbqd.onion/

8987ms

Oct 11, 2026

leak site
OFFLINE

unreachable

http://73klffkonzmo6csfca75k67rniemcvlc2ydnfnkk54cqnkmdk2yqxqad.onion/

3230ms

2d ago

leak site
OFFLINE

unreachable

http://7jkcp27353enwfwdemqgsevyjbtz5cxv66n5ctfgd37h2mdxbhhiluyd.onion/

1391ms

8d ago

leak site
OFFLINE

unreachable

http://66ohzao6afsv2opk22r2kv6fbnf2fthe7v4ykzzc5vjezvvyf3gocwyd.onion/

8989ms

5d ago

leak site
OFFLINE

unreachable

http://a3kvb22nuhfgaluy6uzufrjn3azzsu7tylszdbyne3kiextdmxz4nnyd.onion/

5368ms

16d ago

leak site
OFFLINE

unreachable

http://p474ku5ehoex7mfsbdenppakbb4twvrnvggjzhp53xw4z5qq6glm4yad.onion/

6137ms

17d ago

leak site
OFFLINE

unreachable

http://nbgvwttzh35irjtnxgeaydqob6ixorgabbufb4ociefv4zklyppu5lad.onion/

8100ms

12d ago

leak_site
OFFLINE

unreachable

http://embargobe3n5okxyzqphpmk3moinoap2snz5k6765mvtkk7hhi544jid.onion

3399ms

8d ago

leak site
OFFLINE

unreachable

http://bjy6kwjxxepe6v3vjlxhir4qzdpl7jvwvxua6wvemyfm44di2cxdd4qd.onion/

5564ms

10d ago

leak site
OFFLINE

unreachable

http://5dw7bszmidrhpoltqbqmpixpz6mvgez3mr6xc7ktval2glrmbxkwopad.onion/

8462ms

27d ago

leak site
OFFLINE

unreachable

http://katqzwogbio5ro3glh4k5cmbz2zxeac5az2pebzg4e6n7gw66di7ihad.onion/

4502ms

11d ago

leak site
OFFLINE

unreachable

http://qk5nd25xdnygqrey7al2tb3xop5brk7kxua7xr2zrgftzked43bku4yd.onion/

8985ms

22d ago

leak site
OFFLINE

unreachable

http://rdur3c3dxhjjpfxebaiba6fuj6lqrcdtqfzengynkg5ptyelcclgvdid.onion/

4647ms

13d ago

leak site
OFFLINE

unreachable

http://zs3swtx3pkpi6qy3umpei5ophcvblu6zo3uwi3v2zda7h4lv2iup2iqd.onion/

8627ms

15d ago