Threats Behind the Mask of Gentlemen Ransomware

Gentlemen is an active 2025 ransomware group conducting double-extortion attacks across at least 17 countries and multiple industries; the report provides a technical analysis of the ransomware (written in Go), its execution parameters, advanced encryption scheme (X25519 + XChaCha20), evasion and propagation techniques (Defender disablement, BYOVD, GPO manipulation), and includes IOCs and vendor detection statuses.