No Manners Here: The Ruthless Rise of The Gentlemen Ransomware

## Executive Summary The Gentlemen is a rapidly growing Ransomware-as-a-Service (RaaS) operation active since at least July 2025 that leverages custom C/Go encryptors, a Go-based backdoor and an EDR-killer framework to compromise and encrypt victims; Unit 42 attributes roughly 580 claimed victims across 77 countries, notes a leaked internal database and aggressive affiliate recruitment (90% payout), and provides technical TTPs and defensive recommendations to mitigate this high-risk criminal campaign.