OTX-6ad859c8c552c00c64877692
info
📛 Threat Title
The Gentlemen: A closer look at a not-so-gentle ransomware-as-a-service operation
Description
The Gentlemen is a Russian-speaking ransomware-as-a-service group that emerged in mid-2025 after operating as an affiliate of LockBit and Qilin. The group offers affiliates up to 90% of ransom revenue and has claimed over 800 victims across multiple regions and sectors. The ransomware targets Windows, Linux, NAS, and BSD systems using a double-extortion model that encrypts files and exfiltrates data. Written in Go, the ransomware employs ChaCha20 encryption with multiple speed modes, terminates security processes using vulnerable drivers, and spreads laterally through networks via PsExec. A May 2026 infrastructure breach exposed internal communications, affiliate information, and connections to the Qilin ecosystem. Organizations in the United States and Europe are most frequently targeted, particularly in manufacturing, technology, healthcare, professional services, and retail sectors. Pulse contains 39 indicator(s) (IOCs). View on OTX to inspect.
Indicators of Compromise (39)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
1334f0189a8e6dbc48456fa4b482c5726ab7609f7fa652fcc4c1a96f2334436f
VT: VT base fetch failed: HTTPError: 429 Too Many Requests for files/1334f0189a8e6dbc48456fa4b482c5726ab7609f7fa652fcc4c1a96f2334436f
IOC database
- Type
- hash_sha256
- Value
1334f0189a8e6dbc48456fa4b482c5726ab7609f7fa652fcc4c1a96f2334436f- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for files/1334f0189a8e6dbc48456fa4b482c5726ab7609f7fa652fcc4c1a96f2334436f
hash_sha256
dce2e5cc00eff2493f8ced546dc51f9d5ef78c5ee56805906ec642dfa77a1c70
VT: VT base fetch failed: HTTPError: 429 Too Many Requests for files/dce2e5cc00eff2493f8ced546dc51f9d5ef78c5ee56805906ec642dfa77a1c70
IOC database
- Type
- hash_sha256
- Value
dce2e5cc00eff2493f8ced546dc51f9d5ef78c5ee56805906ec642dfa77a1c70- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for files/dce2e5cc00eff2493f8ced546dc51f9d5ef78c5ee56805906ec642dfa77a1c70
domain
tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion
1 feed
IOC database
- Type
- domain
- Value
tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Imported from threat-intel feed: threatview.io
Threat Hunt — feed corroboration
Listed by 1 threat-intel feed vendor: threatview.io. Open in Threat Hunt →
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
736a6b312fe80efea9bc2e482629be06
IOC database
- Type
- hash_md5
- Value
736a6b312fe80efea9bc2e482629be06- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- MD5 hash of a malware sample (payload) attributed to Gentlemen
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
6440dff8fd8156ef54f6814207983d65
IOC database
- Type
- hash_md5
- Value
6440dff8fd8156ef54f6814207983d65- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- MD5 hash of a malware sample (payload) attributed to Gentlemen
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
926d26fae93d090519ac0f0e1155150e
IOC database
- Type
- hash_md5
- Value
926d26fae93d090519ac0f0e1155150e- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- MD5 hash of a malware sample (payload) attributed to Gentlemen
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
698ce57e5f0ecda7b41d2c6c1e7ca177
IOC database
- Type
- hash_md5
- Value
698ce57e5f0ecda7b41d2c6c1e7ca177- First seen
- Last seen
- Attached to this threat
- Appears in
- 2 threats
- Description
- MD5 hash of a malware sample (payload) attributed to Gentlemen
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
url
http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/
IOC database
- Type
- url
- Value
http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion/- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
cve
CVE-2025-70795
IOC database
- Type
- cve
- Value
CVE-2025-70795- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
9887bc4eed59173d94f5340ef7c09e8ea68cd824
IOC database
- Type
- hash_sha1
- Value
9887bc4eed59173d94f5340ef7c09e8ea68cd824- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
9e9cfecdae356761795f5c5f5655d1ec306e39d6
IOC database
- Type
- hash_sha1
- Value
9e9cfecdae356761795f5c5f5655d1ec306e39d6- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
598b222fe1d12453639dc14b390b3fa9
IOC database
- Type
- hash_md5
- Value
598b222fe1d12453639dc14b390b3fa9- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
f3c6ca1ba97b7f94ab52584dc62ea691
IOC database
- Type
- hash_md5
- Value
f3c6ca1ba97b7f94ab52584dc62ea691- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
06c524df4947206f9d09181a187ead4128f8c0e9
IOC database
- Type
- hash_sha1
- Value
06c524df4947206f9d09181a187ead4128f8c0e9- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
6983544798d04f180427d1cb81c3a11ba227bfd4
IOC database
- Type
- hash_sha1
- Value
6983544798d04f180427d1cb81c3a11ba227bfd4- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
9ef41c3f92003f73a9946f50ab5a20f6f5df56b7
IOC database
- Type
- hash_sha1
- Value
9ef41c3f92003f73a9946f50ab5a20f6f5df56b7- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
a1894ecc337c34031986f5908c7300b2483074f6
IOC database
- Type
- hash_sha1
- Value
a1894ecc337c34031986f5908c7300b2483074f6- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
143af42b492b0f36b296b0b593bd630248b5641c20b1ca1e5603e7e01b5b0676
IOC database
- Type
- hash_sha256
- Value
143af42b492b0f36b296b0b593bd630248b5641c20b1ca1e5603e7e01b5b0676- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
228fc86acbaa6626051fd189932cb1768254aec5a9539771cee8a567103bbec1
IOC database
- Type
- hash_sha256
- Value
228fc86acbaa6626051fd189932cb1768254aec5a9539771cee8a567103bbec1- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
363a435e517f344056c42f8d46ef73396220f79e780828ad35ec0a68e7525d02
IOC database
- Type
- hash_sha256
- Value
363a435e517f344056c42f8d46ef73396220f79e780828ad35ec0a68e7525d02- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
3c2466d8a4572c26530e6f6bcef01fc1baefb98dbff2c65efaed5599622f51f3
IOC database
- Type
- hash_sha256
- Value
3c2466d8a4572c26530e6f6bcef01fc1baefb98dbff2c65efaed5599622f51f3- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
403187f08c064f244e101bbc03f1fb5b82af8ebdf4b2be0ba1a70d59ac74b313
IOC database
- Type
- hash_sha256
- Value
403187f08c064f244e101bbc03f1fb5b82af8ebdf4b2be0ba1a70d59ac74b313- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
4de88220ff6a6dcb137b17d8d3f77ab4bacc39ea4e4d1147f687b021b7a82b8c
IOC database
- Type
- hash_sha256
- Value
4de88220ff6a6dcb137b17d8d3f77ab4bacc39ea4e4d1147f687b021b7a82b8c- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
5206a05eb128ccdef497f7f234cb27678046f6c6b12aa7a072672f2a4694c2b9
IOC database
- Type
- hash_sha256
- Value
5206a05eb128ccdef497f7f234cb27678046f6c6b12aa7a072672f2a4694c2b9- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
586459f1adf018de4586dcd61782839a3ee72d8469944e0f4dd45a6e20598869
IOC database
- Type
- hash_sha256
- Value
586459f1adf018de4586dcd61782839a3ee72d8469944e0f4dd45a6e20598869- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
6a70824fc1777f81c8e8289258ac951e6bac7636db5315b6d7e76c5a58b82b6b
IOC database
- Type
- hash_sha256
- Value
6a70824fc1777f81c8e8289258ac951e6bac7636db5315b6d7e76c5a58b82b6b- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
7284d45bdbb1e32e3fb1ca6041b448b165795c91a2748de715798238fc8b3bff
IOC database
- Type
- hash_sha256
- Value
7284d45bdbb1e32e3fb1ca6041b448b165795c91a2748de715798238fc8b3bff- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
7d90023d535096da99bffcb3370008355435d9f022232870f3c27d29be8be60c
IOC database
- Type
- hash_sha256
- Value
7d90023d535096da99bffcb3370008355435d9f022232870f3c27d29be8be60c- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
7eb2fd5e79e79c3f2a95023d617062908c9d8c5aff9fed8361a5a74dc0d1af75
IOC database
- Type
- hash_sha256
- Value
7eb2fd5e79e79c3f2a95023d617062908c9d8c5aff9fed8361a5a74dc0d1af75- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
9c6f6c0d7127c95aa1360ad6fb0ba5679527a6ea2cc17eb0bc2162dd1e13cd09
IOC database
- Type
- hash_sha256
- Value
9c6f6c0d7127c95aa1360ad6fb0ba5679527a6ea2cc17eb0bc2162dd1e13cd09- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
a1500204822fb16556a274132d802ba18a7e8b95cf134bd17b473f915e8cda81
IOC database
- Type
- hash_sha256
- Value
a1500204822fb16556a274132d802ba18a7e8b95cf134bd17b473f915e8cda81- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
a974a9f097bc2e26f285560f1454c70710c88c30c0ae1edfa2977ad862c56716
IOC database
- Type
- hash_sha256
- Value
a974a9f097bc2e26f285560f1454c70710c88c30c0ae1edfa2977ad862c56716- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
afc30b1a14f2f29572412ba883782eb3ad3a9e6bf9ff9c38aa48ff35a4ee73fa
IOC database
- Type
- hash_sha256
- Value
afc30b1a14f2f29572412ba883782eb3ad3a9e6bf9ff9c38aa48ff35a4ee73fa- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
bd5950d4bd3de1c6d1609b8369b7332ada40c50070a9a3cd8e80ec89b19c48dc
IOC database
- Type
- hash_sha256
- Value
bd5950d4bd3de1c6d1609b8369b7332ada40c50070a9a3cd8e80ec89b19c48dc- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
cd66fb941e63ad9a72687cafb050ed5b4d8b97b34461168581c4f150d6501523
IOC database
- Type
- hash_sha256
- Value
cd66fb941e63ad9a72687cafb050ed5b4d8b97b34461168581c4f150d6501523- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
dfdc8313921c0f594ee1cd41ff7ef73d973c667438c2dfe5c38cafdbba10defb
IOC database
- Type
- hash_sha256
- Value
dfdc8313921c0f594ee1cd41ff7ef73d973c667438c2dfe5c38cafdbba10defb- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
f483faa2b9c9815a0efb08023fe5d243b1b9f7e04b95127c506b6aae824c9d09
IOC database
- Type
- hash_sha256
- Value
f483faa2b9c9815a0efb08023fe5d243b1b9f7e04b95127c506b6aae824c9d09- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
ipv4
2.5.30.112
IOC database
- Type
- ipv4
- Value
2.5.30.112- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
url
http://smp10.simplex.im/a#otp0tgdmnij_qnxcvh9abwfsizeazy_bovoanw59mxi
UrlVoid 0 / 36
IOC database
- Type
- url
- Value
http://smp10.simplex.im/a#otp0tgdmnij_qnxcvh9abwfsizeazy_bovoanw59mxi- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (2)
-
OTX pulse
AlienVaulkt OTX
The Gentlemen is a Russian-speaking ransomware-as-a-service group that emerged in mid-2025 after operating as an affiliate of LockBit and Qilin. The group offers affiliates up to 90% of ransom revenue and has claimed over 800 victims across multiple regions and sectors. The ransomware targets Windows, Linux, NAS, and BSD systems using a double-extortion model that encrypts files and exfiltrates data. Written in Go, the ransomware employs ChaCha20 encryption with multiple speed modes, terminates
- reference AlienVaulkt OTX
Remediations (10)
-
web:blog.barracuda.com
The Gentlemen has emerged as one of the fastest-growing ransomware - as -a- service operations . This threat profile examines the group's origins, affiliate model, attack chain, infrastructure, known tactics, techniques and procedures (TTPs), and the operational-security failures that exposed its internal workings.
-
web:blog.checkpoint.com
Key Findings The Gentlemen ransomware - as -a- service (RaaS) operation has claimed over 320 victims since mid-2025, with 240 attacks occurring in 2026 alone, making it the #2 most active ransomware group by victim count so far this year Check Point Research gained rare access to a live command-and-control server linked to a Gentlemen affiliate, revealing a botnet of over 1,570 likely corporate ...
-
web:blog.checkpoint.com
Key Findings The Gentlemen RaaS has 400+ public victims and is the #2 most active ransomware group globally in 2026 Their internal systems were A hacked ransomware group reveals shocking tactics, AI-powered attacks, and real-world chain victimization. Inside The Gentlemen leak and the critical steps every security leader must take now.
-
web:cyber.netsecops.io
Executive Summary In a case of profound irony, the ransomware - as -a- service (RaaS) group The Gentlemen has been hacked, leading to a massive leak of its internal data. The breach, analyzed by Check Point Research, has provided the cybersecurity community with a rare and detailed window into the inner workings of a modern ransomware operation .
-
web:labs.cloudsecurityalliance.org
GentleKiller: Inside the Gentlemen RaaS EDR-Killer Suite Key Takeaways The Gentlemen ranked as the second most active ransomware - as -a- service operation in the first five months of 2026, with approximately 332 publicly listed victims and internal telemetry suggesting a true victim pool exceeding 1,570 corporate organizations [1] [3]. GentleKiller, the group's in-house defense-evasion ...
-
web:securelist.com
Kaspersky researchers analyze incidents related to The Gentlemen RaaS group, disclose their tools and TTPs, and find a new ransomware variant.
-
web:unit42.paloaltonetworks.com
Unit 42 explores The Gentlemen ransomware operations , revealing the affiliate model driving its rapid growth. Learn more here.
-
web:www.acronis.com
The Gentlemen : A closer look at a not-so-gentle ransomware - as -a- service operation The Gentlemen uses a double-extortion model. In addition to encrypting files, the ransomware can exfiltrate data from compromised systems. This puts additional pressure on victims to pay the ransom to restore access to their files and prevent the stolen data from being publicly leaked. Authors: Acronis Threat ...
-
web:www.kaspersky.com
The Gentlemen is a rapidly expanding Ransomware - as -a- Service (RaaS) operation believed to have emerged around mid-2025. The Gentlemen and its affiliates primarily gain initial access to victim systems through the exploitation of internet-facing services and compromised credentials. The attackers may be seeking collaboration with Initial Access Brokers (IABs) to acquire access to organizations ...
-
web:www.microsoft.com
Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen , a Go-based ransomware deployed by affiliates of Storm-2697 that combines per-file ephemeral key encryption with an aggressive self-propagation module to deploy itself across an entire network using series of simultaneous lateral movement techniques per target.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.