Dossier
Gentlemen ransomware
Coverage of Gentlemen ransomware in the Nexus archive.
- Gentlemen ransomware uses multiple EDR killers to disable defenses
The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers to help affiliates evade detection in attacks.
- The Gentlemen ransomware now uses SystemBC for bot-powered attacks
The Gentlemen ransomware group is now utilizing the SystemBC proxy malware botnet, which includes over 1,570 corporate hosts, following an investigation into a recent ransomware attack by an affiliate of the gang.