How the Gentlemen Ransomware Group Built a Multi-Region Attack Machine in H1 2026
ID: 24bb38b0-aef7-55a2-bef9-c48cd5294a2d
STIX ID: report--24bb38b0-aef7-55a2-bef9-c48cd5294a2d
Feed Name: The Cyber Express
Threat Score
The Cyble CRIL report outlines the rapid emergence and global expansion of 'The Gentlemen' ransomware-as-a-service group in H1 2026, attributing large numbers of attacks across Europe, APAC, MENA, South America and the Americas against manufacturing, construction, healthcare, government, IT and professional services; it highlights the group's use of double extortion, affiliate-driven scaling, and the resulting need for organizations to monitor new RaaS actors alongside established threats.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.