Ransomware Tool Matrix Project Updates: Three Groups To Track

This post updates the Ransomware Tool Matrix and Ransomware Vulnerability Matrix with profiles for three active ransomware operations — TheGentlemen, DragonForce, and WarLock — detailing their toolkits, exploited CVEs/zero-days, BYOVD (bring-your-own-vulnerable-driver) techniques to bypass EDR, and focus on internet-facing appliances and admin tooling; it concludes with concrete recommendations for hunting, detection engineering, and patch prioritisation.