Gentlemen RaaS Unifies HexKiller, ThrottleBlood, and HavocKiller in New Evasion Suite
ID: abdfe722-b9c8-563f-a794-4cf2048bca9e
STIX ID: report--abdfe722-b9c8-563f-a794-4cf2048bca9e
Feed Name: GBHackers
Threat Score
Gentlemen is a late-2025 ransomware-as-a-service operation that centralizes defense-evasion via an in-house EDR-disabling framework (GentleKiller) and multiple BYOVD-based EDR killers (HexKiller, ThrottleBlood, HavocKiller), enabling rapid weaponization and global double-extortion attacks; the report details technical TTPs, targeted regions, sample filenames and SHA-1 hashes, and affiliated tools including a Rust-based credential stealer (OxideHarvest).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.