Inside The Gentlemen: Undisclosed TukTuk C2 Framework and EDR Neutralization Research

Reported 02 Sep 2026 by otx · Severity: medium

Analysis of server infrastructure revealed a complete TukTuk C2 framework (version 2.0) with cross-platform capabilities, including Windows and Linux agents, backend infrastructure, and management panel. The server contained eb.sys matching GentleKiller, along with comprehensive