Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/29 9:52 a.m.•25 views

gentlemen-decryptor

The Gentlemen Ransomware Decryptor The first publicly available decryption method for The Gentlemen ransomware. The Gentlemen also known as hastalamuerte is currently the most active ransomware-as-a-service RaaS operation globally, with 320+ confirmed victims as of Q1 2026. Until now, every major...

6.3AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2026/10/23 5:50 p.m.•19 views

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Cybersecurity researchers have discovered an artificial intelligence AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an "Autonomous Red Team Kill Chain Framework" referred to as Phantom. The threat actor is assessed to be...

5.7AI score
SaveExploits0
HackRead
HackRead
•added 2026/10/21 1:04 p.m.•10 views

INC and The Gentlemen Ransomware Affiliates Expose 8,257 AI Messages

SOCRadar has found seven exposed servers linked to INC and The Gentlemen ransomware affiliates, holding AI chats, stolen…...

5.8AI score
SaveExploits0
Talos Blog
Talos Blog
•added 2026/09/17 10:00 a.m.•22 views

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use

Compared with the same period last year, ransomware incidents in Japan increased slightly by approximately 4.7%, indicating that ransomware continues to pose a significant threat. In Japan, The Gentlemen was the most active ransomware group in the first half of 2026. Attackers continue to primari...

5.8AI score
SaveExploits0
Securelist
Securelist
•added 2026/06/29 10:00 a.m.•55 views

The Gentlemen are knocking: сustom backdoors and evolving tactics

Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service RaaS model. Although our initial assessment suggested the group first appeared in mid-2025, it actually started ramping up its activities at the beginning of 2026...

6AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2026/03/19 2:25 p.m.•20 views

ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More

ThreatsDay Bulletin is back on The Hacker News, and this week feels off in a familiar way. Nothing loud, nothing breaking everything at once. Just a lot of small things that shouldn’t work anymore but still do. Some of it looks simple, almost sloppy, until you see how well it lands. Other bits fe...

9.8CVSS8.3AI score0.99999EPSS
SaveExploits48
Rows per page
Query Builder