The Gentlemen ransomware: Dissecting a self-propagating Go encryptor

Reported 28 May 2026 by otx · Severity: medium

The Gentlemen is a ransomware-as-a-service operation tracked as Storm-2697, distinguished by combining robust per-file encryption using Curve25519 with XChaCha20 stream cipher alongside aggressive self-propagation capabilities designed for broad network compromise. Emerging in mi