📰 'The Gentlemen' Ransomware Group Emerges as a Top-Tier Threat with Advanced TTPs
Threat Actor Spotlight: 'The Gentlemen' ransomware group has exploded onto the scene, now a top-tier RaaS operation. Using advanced malware and the SystemBC RAT, they've hit over 320 victims in 2026. 🎩 #Ransomware #TheGentlemen #SystemBC
🌐 cyber[.]netsecops[.]io
The Gentlemen smascherati: quando il secondo gruppo ransomware al mondo diventa la vittima
Il backend del gruppo ransomware-as-a-service The Gentlemen è stato violato e i dati interni pubblicati. Check Point Research ha analizzato il leak, rivelando struttura organizzativa, identità dell'amministratore, tattiche di negoziazione e l'arsenale tecnico di uno dei gruppi criminali più attivi del 2026.
The #Gentlemen #ransomware now uses #SystemBC for bot-powered attacks
Key Points The Gentlemen RaaS The Gentlemen ransomware‑as‑a‑service (RaaS) operation is a relatively new group that emerged around mid‑2025. The operators advertise their services across multiple underground forums, promoting their ransomware platform and inviting penetration testers (and other technically skilled actors) to join as affiliates. The RaaS provides affiliates with multi‑OS lockers for Windows, Linux, […]
📰 Gentlemen RaaS Expands with SystemBC Botnet for Covert Attacks
Gentlemen RaaS is upgrading its toolkit, using the SystemBC botnet for covert SOCKS5 proxying. The combo enables stealthy C2 and payload delivery for attacks on Windows, Linux, and ESXi. 💣 #Ransomware #SystemBC #Gentlemen #CyberSecurity
Gentlemen Ransomware Spreads Rapidly Through Affiliate Network
Gentlemen Ransomware is spreading rapidly through its affiliate network, fueling a surge in multi-platform attacks and infections linked to the malicious tool SystemBC. This ransomware-as-a-service operation is making it alarmingly easy for cybercriminals to join the fray and wreak havoc.
#Ransomware #GentlemenRansomware #Ransomwareasaservice #AffiliateNetwork #Systembc
Gentlemen Ransomware Gang Taps SystemBC for Botnet Attacks
Imagine your business's infrastructure being hijacked and turned into a fleet of malicious proxies - it's a harsh reality that's now hitting home for over 1,570 corporate victims who've fallen prey to the Gentlemen ransomware gang's SystemBC botnet attacks. Their compromised systems are being used to run proxy services for…
#GentlemenRansomware #Systembc #BotnetAttacks #RansomwareOperations #MalwareOperations
In February 2026, the Fortgale Incident Response team investigated a multi-stage intrusion attributed to Mora_001, a Russian-origin threat actor exploiting Fortinet vulnerabilities. The campaign, internally dubbed "FortiSync Quasar," revealed an evolution from ransomware operations to strategic espionage, deploying Matanbuchus 3.0, Astarion RAT, and SystemBC. Rapid containment prevented any data exfiltration.
SystemBC infections now exceed 10,000 IPs globally, including systems linked to government hosting.
Silent Push also uncovered a stealthy Linux-targeting Perl variant with zero AV detections.
Thoughts?
#ThreatIntel #Malware #SystemBC #Ransomware
CyberNetsecIO
(in)sicurezza digitale
The New Oil
The Threat Codex
Analyst207
TechNadu