Gentlemen ransomware disables Defender, deletes backups and spreads
Acronis describes a Go-based RaaS from 2025 that also targets Linux, NAS and BSD, with more than 800 claimed victims.
74
Malware
Gentlemen ransomware
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenOct 21, 2026
- Last mentioned4d ago
Timeline
1 articles · newest firstRelated CVEs
by mentions- CVE-2025-70795<1%5.5STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that…
Appears with
- Microsoftvendor · 1
- Safeticavendor · 1
- ProcessMonitorDriverproduct · 1
- Windowsproduct · 1
- Acronisorganization · 1
- Lenovovendor · 1
- BootRepair.sysproduct · 1
- The Gentlementhreat actor · 1
- Microsoft Defenderproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.