Description
Gentlemen is ransomware that encrypts files on infected systems and demands payment for decryption. Its operators gain access through phishing and compromised remote services, disable security tooling, and steal data before encryption to increase pressure on victims. As with other families of its class, defenders should prioritize isolating infected systems quickly, because encryption spreads through network shares once the payload executes.
Stats
- First seen
- June 2026
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Generic.Ransom.Gentlemen.A.077E0082 |
| Generic.Ransom.Gentlemen.A.127B19FC |
| Generic.Ransom.Gentlemen.A.15164001 |
| Generic.Ransom.Gentlemen.A.1DCA3861 |
| Generic.Ransom.Gentlemen.A.33484396 |
| Generic.Ransom.Gentlemen.A.3BBA5778 |
| Generic.Ransom.Gentlemen.A.47E9BA0E |
| Generic.Ransom.Gentlemen.A.6AF337A1 |
| Generic.Ransom.Gentlemen.A.73FC97B8 |
| Generic.Ransom.Gentlemen.A.75C0E333 |