According to reports from Wu, TRM Labs states that the Embargo ransomware group has extorted over $34.2 million since April 2024, primarily targeting the U.S. healthcare and manufacturing sectors. Its technical characteristics are highly similar to the now-defunct BlackCat, suggesting it may be a continuation of that version. A portion of the ransom has flowed into the sanctioned platform Cryptex net, with approximately $18.8 million still unaccounted for.