THREAT OPS › Threat News › The Gentlemen are knocking: сustom backdoors and evolving tactics
The Gentlemen are knocking: сustom backdoors and evolving tactics
<p><img alt="" class="attachment-securelist-huge-promo size-securelist-huge-promo wp-post-image" height="400" src="https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/06/29071114/SL-The-Gentlemen-ransomware-featured-990x400.jpg" width="990" /></p><h2 id="introduction">Introduction</h2> <p>This year saw the emergence of The Gentlemen, a prominent example of a group operating unde
MITRE ATT&CK techniques
Indicators of compromise
- 3b46a729db7ae6af8b19711c9452194dmd5
- 02944c8a5535cdb5b2cbb893db2d5acfmd5
- 10ca9a4040001560d053b7e7885c1b95md5
- 3c471ebc947cdf32240a90ffadf49b13md5
- 4be8bb62f0ebbcf4ce52c35ab6f794f5md5
- 53c616677bc7e2a0a03127f19166d007md5
- 5c3b9821fc82a9028cb63b9671950919md5
- 5f0b2c6d9f442754258bf4dd841c8341md5
- 608faf58353b65c45ef9833358ac3787md5
- 6ae7c9a7ea0b8c40a64225734f6bd01dmd5
- 846dc77c1246db20d976346e0e359502md5
- adac9984b3cc43d66a0d33079bbec299md5
- ae0e536766788478263bf448a9381641md5
- b3e418d30312c1b2c58a791286868f42md5
- c2764744dcb4b0e1db79ca1e8bf65368md5
- d12a5b36dd00586cc374a1cae43efed4md5
- d2f72897e8986303d5567eb2384932b8md5
- de1522f9219497632f30f8a6e72f26b6md5
- fdae2beb813778b4540a997706862096md5
- b9986a0f1f1f1a798dc3f0c59a80a1a3md5
- 554e699c96b332468f1ae69c1ae81ef9md5
- 5761bd63da03686fc480245da7bd1e9fmd5
- b6b51508ad6f462c45fe102c85d246c8md5
- 8f0577d28c4ff5f71b149f444bfaba8emd5
- 525ef6014f0ef20e44fe47c1d9980b69md5
- 407b6a136bbaa7172eb44ef9d08bb58amd5
- 9321a61a25c7961d9f36852ecaa86f55md5
- 73f0a8c3ea794a04e80c32038249f044md5
- eef8a950952696b018aa9c6da2f5d7admd5
- edb1c480295250dd1a38f3aa1357deaemd5
- 5537c708edb9a2c21f88e34e8a0f1744md5
- https://ransomware.live/stats/2026url
- https://www.group-ib.com/blog/hastalamuerte-gentlemen-raas-ttps/url
- https://live.sysinternals.com/PsExec.exeurl
- https://www.kaspersky.com/enterprise-security/threat-intelligence-reporting?icid=gl_sl_tip-lnk_sm-team_c09760866e96002eurl
- https://opentip.kaspersky.com/3b46a729db7ae6af8b19711c9452194d/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_9280c34b0333f2eaurl
- https://opentip.kaspersky.com/02944c8a5535cdb5b2cbb893db2d5acf/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_e6622f18f0a7e93eurl
- https://opentip.kaspersky.com/10ca9a4040001560d053b7e7885c1b95/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_07f26ea52b17f537url
- https://opentip.kaspersky.com/3c471ebc947cdf32240a90ffadf49b13/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_624b80001d47cbf5url
- https://opentip.kaspersky.com/4be8bb62f0ebbcf4ce52c35ab6f794f5/?utm_source=sl&utm_medium=sl&utm_campaign=sl&icid=gl_sl_opentip-lnk_sm-team_53df6e4679d6f919url
Original source: https://securelist.com/the-gentlemen-raas/120447/