The Gentleman Ransomware | Defense Evasion TTPs Uncovered

Reported 21 May 2026 by otx · Severity: medium

In April and May 2026, investigations revealed two incidents involving The Gentlemen ransomware-as-a-service operation, which has claimed over 400 victims across 70 countries since mid-2025. Both incidents demonstrated common tactics including Scheduled Tasks, PowerShell commands