Embargo

Compare
embargo logo embargo logo embargo logo
Parsing: enabled Known RaaS

View crypto

Description

Embargo is a Ransomware-as-a-Service (RaaS) operation first observed in May 2024. It employs a double-extortion model, encrypting victim data while exfiltrating sensitive files for publication on a Tor-based leak site. Embargo uses a Rust-based payload that leverages AES-256 and RSA-4096 encryption, deletes volume shadow copies, and disables recovery features to prevent restoration. Its targeting appears opportunistic but has included sectors such as finance, manufacturing, and professional services across North America, Europe, and Asia. The ransomware’s customization options, negotiation portal, and leak infrastructure suggest a closed affiliate model with a focus on operational security.

External Analysis3
External Analysis
https://www.sentinelone.com/blog/embargo-ransomware-new-raas-on-the-scene/
https://www.zscaler.com/blogs/security-research/technical-analysis-embargo-ransomware
https://www.trendmicro.com/en_us/research/24/f/embargo-ransomware-raas-analysis.html
Ransom notes2
PGP1
PGP
iHUEARYKAB0WIQSZ6QZf99BZf/PFEhnwdBLECjxobQUCZjt/BgAKCRDwdBLECjxo bUZgAQDPawmZQUCwlD4g1KCa3QGRLpf/v48ottU9z0Es+2vL1AD+Jn9AugmeQYk2 wl0jsnMyGC08OP78V/y1qO3xDvihjQw= =foka
Tox1
Tox
9500B1A73716BCF40745086F7184A33EA0141B7D3F852431C8FDD2E1E8FAF9277E9FDC117B47
Urls2
Url
Status
Screen
Uptime 30d
Health
http://embargobe3n5okxyzqphpmk3moinoap2snz5k6765mvtkk7hhi544jid.onion/ Down Screen
26%
http://embargobe3n5okxyzqphpmk3moinoap2snz5k6765mvtkk7hhi544jid.onion/api/blog/get Up Screen
37%
File servers27
Url
Status
Screen
Uptime 30d
Health
http://76yl7gfmz2kkjglcevxps4tleyeqnqhfcxh6rnstxj27oxhoxird3hyd.onion Down
0%
http://yj3eozlkkxkcsprc2fug7tolgtnllruyavuyyar3yzsccjdgvu2bl2yd.onion/ Down Screen
0%
http://ufjoe7fdwvml52oin7flwlqksvp3fcvfyh2kwsngt7j2yf7xou52w2qd.onion/ Down Screen
0%
http://i2okedfryhllg6ka6aur3wnxcxdaufbuuysp4drr5xoc6gvqpcogejid.onion/ Down Screen
0%
http://s37weqmxusvfcxkoorgkut5v7frn27zftdb6pdjsyjl5djg6oxjqjbid.onion/ Down Screen
0%
http://oftm4u5cfl6wyadj27h3csdxfvyd7favssxcr7l7wnswdsrfedxswxqd.onion/ Down Screen
0%
http://wg55rcy2chmbpeh6pl5pftnveac2lqfxbletrtzanfjhhmvcjnn5tcqd.onion/ Down Screen
42%
http://sbjthwyoxfuxq75b77e2hsj7ie67m3qicfnuikhuabwo3sikvrzyaxad.onion/ Down Screen
0%
http://zo5xog4vpvdae473doneepetidh36m5czdq2vyeiq3lvqhuel56p6nid.onion/ Down Screen
0%
http://66ohzao6afsv2opk22r2kv6fbnf2fthe7v4ykzzc5vjezvvyf3gocwyd.onion/ Down Screen
0%
https://2nn4b6gihz5bttzabjegune3blwktad2zmy77fwutvvrxxodbufo6qid.onion/ Down Screen
0%
http://y6kyfs2unbfcyodzjrxadn4w5vyulhyotdi5dtiqulxbduujehupunqd.onion/ Up Screen
32%
http://3o5ewrzhqoyodfs5kll4cjxagdfrpuu474panwobm4im7ejfpaux5jyd.onion/ Down Screen
0%
http://4q5tsu5o3msmv4am4dfhupwhzlyg7wv3lpswbvbhcrknr4ega7xetxad.onion/ Up Screen
69%
http://z2b75lk7xf6kme3zfvlmdmpwiaansnkcuhsojd23dgub5md24fhogcyd.onion/ Down Screen
42%
http://7lxwbzlkpjyuahuvngwwkc4mycj2a4flh45ksqjo2ezfdbkmxmlxikad.onion/ Down Screen
0%
http://7watkqnnuwxvlpgy5gaosgqy67nve3jgpy37xobqngmswz3vuvde56yd.onion/ Down Screen
0%
http://5dw7bszmidrhpoltqbqmpixpz6mvgez3mr6xc7ktval2glrmbxkwopad.onion/ Down Screen
42%
http://ec6edgevw2lzqy4ipafpbvjuu7r6ugqbljqokl3pvecc6c3a5ix3wgyd.onion/ Down Screen
32%
http://qrthxx5hkttfl3pk57eou6ddqi34pxsibxvndq7vt5pblqbaurkmxbqd.onion/ Down Screen
5%
http://usu2gxoiijvnswhfymd6ucjjwhtgqby4c4ywzvnrtw4i6mpgppvzpsad.onion/ Down Screen
11%
http://qk5nd25xdnygqrey7al2tb3xop5brk7kxua7xr2zrgftzked43bku4yd.onion/ Down Screen
26%
http://p474ku5ehoex7mfsbdenppakbb4twvrnvggjzhp53xw4z5qq6glm4yad.onion/ Down Screen
37%
http://vh2wkazjlflm6pvwtvw2fnztu3dcw4346lasvikzeg25yhx6bjvl5pqd.onion/ Down Screen
26%
http://rngjexyyyl5mek5kg2lkxilqfef5nr6bpa4u24i5ei5hb3ydsh5drpid.onion/ Down Screen
5%
http://tamvd5fdyvpekhaf2sdg5sum73ra2abc4h2iqihijpvw4hythnlmuhid.onion/ Down Screen
5%
http://jolfnfw6lmcjsppgjfimhimqt2t7viybk67yc5zkxip6fxrcgo7mv4id.onion/ Up Screen
26%
Chat servers2
Url
Status
Screen
Uptime 30d
Health
http://5ntlvn7lmkezscee2vhatjaigkcu2rzj3bwhqaz32snmqc4jha3gcjad.onion/ Down Screen
0%
http://a3kvb22nuhfgaluy6uzufrjn3azzsu7tylszdbyne3kiextdmxz4nnyd.onion/ Up Screen
42%
Activity (interactive) 29
Activity charts
Posts29
Date Title Description Screen
rotaryeng.com.sg DATA AVAILABLE CreatedUpdatedAvailable 6/10/2025, 6:24:58 PM6/13/2025, 10:11:19 PM3/3 Founded in 1972, Rotary is one of the region’s leading oil and gas infrastructure services companies with extensive international experience offering fully integrated engineering design, procurement, and construction (EPC) services to the oil and gas, petroleum, petrochemical and pharmaceutical industries. Headquartered in Singapore, Rotary has subsidiaries and associate companies in Malaysia, Thailand, Indonesia, India, China, Vietnam, Saudi Arabia, Oman, the United Arab Emirates, Australia, Myanmar and Slovenia. Screen
hawaiiunified.com DATA AVAILABLE CreatedUpdatedAvailable 6/2/2025, 6:59:58 AM6/24/2025, 3:04:49 PM1/1 HAWAI'I UNIFIED is a licensed General Contractor, Electrical Contractor, Plumbing Contractor, Steel Door Contractor, and Fencing Contractor providing services throughout the Pacific Islands. -CONSTRUCTION: Design/Build, Build-Outs, Remodels, and Tenant Improvements -ENERGY: Renewable Energy Project Development, Engineering, Procurement, Construction, O&M -MAINTENANCE: Facility Repair & Maintenance- Electrical, Plumbing, HVAC, Painting, Handyman -RESTORATION: Mold Remediation and Pathogen Removal and Sterilization Screen
M&H Electric Fabricators Welcome to M&H Electric Fabricators, where we've been sparking innovation and powering up the automotive electric industry since 1985. Our experience and commitment to excellence have helped us become the leading supplier of wiring harnesses to the automotive ...
allstarflooring.com All Star Flooring, Inc. is a leading provider of commercial flooring solutions with over 35 years of experience serving the Washington Metropolitan Area, including the District of Columbia, Maryland, and Virginia. The company's headquarters is located at 10742 ...
Kingsmen Creatives Ltd. Kingsmen Creatives designs roll-out retail environments based off their clients' needs and conceptualize events for their clients. Established in 1976 and headquartered in Singapore, the Group has a network of 21 offices and full service facilities serving ...
rixos.com Founded in 2000 and headquartered in Dubai, United Arab Emirates, Rixos Hotels is a Turkish luxury hotel chain. The company operates hotels and resorts across Europe and the Middle East, including properties in Azerbaijan, Egypt, Kazakhstan, Russia, Switzerland, Turkey, Ukraine and the UAE. Screen
Insider Technologies Limited Based in Manchester, Great Britain, Insider technologies is a leading provider of big data, predictive software security solutions to the banking and payments industry. The company's innovative high volume transactions analytics systems allow card issuers and ...
tequaly.com One of Brazil's largest suppliers of technological systems, maintenance, manufacturing, assembly and services for industries in various segments, which has been successfully partnering with clients in Latin America since 1996. Specialized in offering complete solutions or solutions tailored to your exact needs. Located in Curitiba/PR, Brazil, Tequaly has approximately 100,000 m² of manufacturing area and 5,000 m² of administrative and support area. Screen
myhscu.com Heritage South Credit Union was originally chartered in 1937 as the Avondale Employees Federal Credit Union. After many years and a couple of name changes, Heritage South Credit Union continues to have a strong presence in Sylacauga, Childersburg, Moody, and ...
annegrady.org Anne Grady Services provides a vast array of assistance for adults and children with intellectual disabilities. Screen
Heritage South Credit Union Heritage South Credit Union was originally chartered in 1937 as the Avondale Employees Federal Credit Union. After many years and a couple of name changes, Heritage South Credit Union continues to have a strong presence in Sylacauga, Childersburg, Moody, and Alexander City as a fixture in the community and as a stable and secure financial institution. Heritage South Credit Union has grown to over $160 million in assets and over 14,000+ members. Screen
alansarioman.com Al Ansari is a provider of integrated building, infrastructure and engineering solutions. The group was established in 1975 in response to the growing needs of the infrastructure and construction developments in Oman. Over the years, the group has earned a reputation of delivering high quality service in a timely manner. Al Ansari has undertaken many vital construction projects that have contributed to the development of the local infrastructure. Al Ansari is registered as an"Excellent Grade" company with the Tender Board of Oman & is also certified by the Quality Management Standard ISO 9001:2008. With a work force of over 4,000, the group strongly believes in investing into HRD (Human Resource Development) initiatives to enhance individual's skill and competencies and produce "Extraordinary" human capital. Screen
backyarddiscovery.com Backyard Discovery is built for families. From a child’s first playset to structures that guard the parents’ newest outdoor interests, our products are meant to play a role in families’ lives for years and years. You can find our dedicated team hard at ...
American Associated Pharmacies American Associated Pharmacies (AAP) is a member-owned cooperative of over 2,000 independent pharmacies working together as a cohesive network. AAP in partnership with its subsidiaries, Associated Pharmacies, Inc. (API), Arete Pharmacy Network, and ...
wexfordcounty.org Located in Northern Lower Michigan, Wexford County boasts a population of approximately 35,000, with a combination of an industrial/recreational demographic base.
mh-m.org Memorial Hospital and Manor celebrated its 50th Anniversary in 2010. Memorial Hospital was officially dedicated on Sunday, April 3, 1960, and opened its doors to receive patients the following day. The 80-bed hospital was built under the Hill-Burton Hospital ...
Memorial Hospital & Manor Memorial Hospital and Manor celebrated its 50th Anniversary in 2010. Memorial Hospital was officially dedicated on Sunday, April 3, 1960, and opened its doors to receive patients the following day. The 80-bed hospital was built under the Hill-Burton Hospital ...
weisermemorialhospital.org Weiser Memorial Hospital is a full service not-for-profit community hospital that has been serving the healthcare needs of Washington County and surrounding areas since 1950. In recent years, the hospital has grown to include the Surgical and Specialty Clinic ... Screen
pioneerworldwide.com Founded in 1917, Pioneer Balloon Company is the world's premier manufacturer of latex balloons, with a diversified range of products that includes Microfoil® balloons and Bubble Balloons. Additionally, Pioneer offers innovative product solutions to customers ... Screen
summervillepolice.com The Summerville Police Department is committed to building relationships with community members while providing the highest level of service in shooting black children. Screen
diligentusa.com Diligent Delivery Systems provides transportation services for businesses within varying industries. Major clients include WorldPac and PharMerica. The company is currently facing tight liquidity and debt default due 23 million cash uses within the past 18 ... Screen
gerard-perrier.com Gerard Perrier Industrie SA is a France-based company that provides electrical and electronic automation solutions to industry including design and manufacturing, installation and maintenance. The Company operates through its subsidiaries, including SAS Geral, ... Screen
jla.com JLA are the largest provider of critical equipment and rapid-response maintenance services to businesses in the UK. They operate a nationwide fleet of installers and engineers and tens of thousands of Laundry, Catering, HVAC, and fire safety assets in every ...
dmedelivers.com Marketing, Printing, Logistics Screen
shamrocktradingcorp.com Shamrock Trading Corporation is the parent company for a family of brands in transportation services, finance and technology. The company offers transportation logistics, discount programs, and international trade financing. Screen
orga-soft.de Software Development Screen
rexmoore.com Founded in 1922 and headquartered in Sacramento, California, Rex Moore is a family-owned and managed company, providing electrical and integrated systems engineering, manufacturing, construction and maintenance. The company performs both design/build and bid ...
firstmac.com.au Firstmac Limited is an Australian owned company with experience in home and investment loans. They have a range of market insurance products backed by international company, Allianz Group. International ratings agency Standard & Poors gives Firstmac its ... Screen
mulfordconstruction.com Heavy Civil Contracting, Earthwork and Utilities Screen
Note