Embargo is a new, sophisticated ransomware group that has been targeting US companies. First observed in May 2024, Embargo ransomware attacks have escalated rapidly. The group uses a toolkit that includes a loader named MDeployer and an EDR killer called MS4Killer, both written in Rust. These tools help the ransomware evade detection and compromise systems effectively. Embargo’s advanced techniques and Rust-based tooling make it a serious threat to organizations.