The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes

The report describes The Gentlemen RaaS and its GentleKiller EDR-evasion framework — a multi-stage toolkit distributed to affiliates that targets over 400 security-related processes, abuses signed drivers (BYOVD), removes persistence and shadow copies, and enables widespread ransomware deployment (linked to ~478 victims); it recommends layered defenses such as network-based detection, immutable remote logging, tamper protection, privileged access controls, and deception.