Tag: the gentlemen ransomware

2 Attack Reports | 0 Vulnerabilities

Attack reports

Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware

An intrusion was observed in April 2026 where threat actors deployed EtherRAT malware through a malicious MSI installer disguised as a Sysinternals tool. The malware utilized Ethereum blockchain via EtherHiding for dynamic C2 configuration updates. Following reconnaissance activities, actors deploy…

dll sideloading

the gentlemen ransomware

Published: May 11, 2026

Linked vulnerabilities : CVE-2025-55182 (CVSS 10.0)

Downloadable IOCs: 17

Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed

The Gentlemen ransomware group has emerged as a sophisticated threat actor targeting multiple industries across 17 countries, with a focus on the Asia-Pacific region. Their campaign demonstrates advanced capabilities, including the use of custom tools to bypass enterprise endpoint protections, expl…

lateral movement

data exfiltration

defense evasion

the gentlemen ransomware

group policy manipulation

enterprise targeting

Published: September 9, 2025

Downloadable IOCs: 0

Click here to see more Attack Reports