news.mlab.sh
Back to the feed
ransomware

The Gentlemen are knocking: сustom backdoors and evolving tactics

High
Image: Securelist
Summary

This report details the activities of "The Gentlemen," a ransomware-as-a-service (RaaS) group that has been aggressively targeting large corporations and critical infrastructure since early 2026. The group employs sophisticated tactics including custom tool development, extensive reconnaissance, and lateral movement techniques, often utilizing initial access brokers. Their methods involve exploiting vulnerabilities, disabling security software, and deploying ransomware, highlighting a significant threat to organizations worldwide.

Read the full article at Securelist

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Report an error
Confirmed errors are fixed and listed on /corrections.