gentlemen-decryptor

The Gentlemen 勒索软件解密器 首个公开可用的 The Gentlemen 勒索软件解密方法。 The Gentlemen（又名 hastalamuerte）目前是全球最活跃的勒索软件即服务（RaaS）行动，截至 2026 年第一季度已有 320+ 确认受害者 。此前，所有主要安全厂商——Cybereason、Group-IB、Check Point、ASEC、Trend Micro——均评估其加密在密码学上无法破解。不存在公开的解密器。 我们打破了它。 工作原理 The Gentlemen 使用 XChaCha20 流加密配合 X25519 ECDH...

The Gentlemen are knocking: сustom backdoors and evolving tactics

Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service RaaS model. Although our initial assessment suggested the group first appeared in mid-2025, it actually started ramping up its activities at the beginning of 2026...

ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More

ThreatsDay Bulletin is back on The Hacker News, and this week feels off in a familiar way. Nothing loud, nothing breaking everything at once. Just a lot of small things that shouldn’t work anymore but still do. Some of it looks simple, almost sloppy, until you see how well it lands. Other bits fe...