GentleKiller targets more than 400 security processes across 48 products
ID: 7ffd3a9e-bea2-532d-bd44-123a1a4b8e6e
STIX ID: report--7ffd3a9e-bea2-532d-bd44-123a1a4b8e6e
Feed Name: Help Net Security
Threat Score
Gentlemen, a late‑2025 ransomware-as-a-service gang, develops and supplies a portfolio of EDR-killer tools (centered on an in-house framework called GentleKiller plus acquired components) to affiliates; a May 2026 internal leak and telemetry link these tools to active intrusions worldwide, double extortion operations, and rapid adoption of vulnerable-driver exploits and public PoCs to evade detection.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.