The Gentlemen Ransomware With Custom EDR/AV Killers Scaling Faster to Attack Industries Worldwide

The Gentlemen is one of the most rapidly escalating ransomware threats observed in 2026. Emerging in mid-2025 from a payment dispute within the Qilin RaaS program, the group has evolved into a full-spectrum, human-operated Ransomware-as-a-Service (RaaS) operation that Microsoft tracks as Storm-2697. Within its first year of independent operation, The Gentlemen has claimed over 500 victims across 70+ countries, accounting for approximately 10% of all global ransomware activity in April 2026. What sets this group apart is not scale alone it is their operator-maintained EDR/AV killer infrastructure, marketed directly to affiliates under the in-house framework named GentleKiller, comprising at least eight distinct BYOVD (Bring Your Own...

Läs hela artikeln hos källan.