The Gentlemen is a ransomware-as-a-service (RaaS) operation first identified in 2025 that uses a double-extortion model to maximize pressure on victims. In addition to encrypting files and disrupting operations, the group steals sensitive data and threatens to publish it on a dedicated leak site if ransom demands are not met. The threat profile analyzes the group’s tactics, techniques, and procedures using frameworks such as the Diamond Model and MITRE ATT&CK, providing insight into its operations across Windows and Linux environments. The report also examines the group’s targeted industries, geographic focus, known tools, exploited vulnerabilities, and relationships with other threat actors. By mapping the ransomware lifecycle through a kill chain approach, the profile helps organizations

Join for free to read