The Gentlemen: 478 victims and self‑propagation potential — key findings

Colleagues, a note for cybersecurity professionals: The Gentlemen reports 478 victims and can spread like a worm.

Key facts:
- The group split from RaaS and actively uses AI in development and post‑exploitation.
- Multi‑platform Go ransomware (X25519/XChaCha20); --spread enables self‑propagation, --wipe removes artifacts.
- Attack vectors: exposed internet services and edge devices (VPN, Cisco, Fortinet), BYOVD and EDR evasion.

Why it matters: the risk of rapid, widespread propagation increases pressure on perimeter defenses, privilege control and backup strategies.

What do you consider the priority steps to protect us now?

#cybersecurity #ransomware #infosec #RaaS