Thus Spoke...The Gentlemen

Based on the detailed analysis provided in the report, here are the key points regarding The Gentlemen ransomware group:

1. RaaS Model:

   • The Gentlemen operates as a Ransomware-as-a-Service (RaaS) platform.
   • It has a panel and builder for distributing malware to affiliates.

2. Infrastructure:

   • Uses Linux-based infrastructure with containers and a TOR front-end.
   • Has a custom ransomware locker that can spread via Group Policy Objects (GPO).

3. Operational Structure:

   • Centralized control by the main operator, likely "hastalamuerte" who also uses the handle "zeta88".
   • Affiliates and operators like "qbit" and "quant" carry out day-to-day operations.

4. Communication Channels:

   • Uses internal chat channels for coordination.
   • Channels include INFO, general, TOOLS, and PODBOR (for target selection).

5. Targeting Strategy:

   • Focuses on corporate victims.
   • Discusses selecting targets ("подбор" or "selection").
   • Assigns groups of 2-3 people to specific campaigns.

6. **Technical

Read the full article at Check Point Research

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.