The Gentlemen are knocking: сustom backdoors and evolving tactics

Reported 29 Jun 2026 by otx · Severity: medium

The Gentlemen ransomware-as-a-service group emerged as a top-10 threat actor in the first half of 2026. The group exploits vulnerabilities in internet-facing devices like VPNs and firewalls, potentially collaborating with initial access brokers. They employ comprehensive reconnai