Utopia Tech
SecurityAI-assisted1 min read

The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm

The Gentlemen ransomware operation has claimed 478 victims and initially functioned as an affiliate conducting double extortion attacks using multiple ransomware-as-a-service (RaaS) platforms. The threat group leveraged resources from established RaaS schemes including LockBit, Qilin, and Medusa before evolving its operations. The ransomware notably possesses worm-like capabilities that enable it

UT

Utopia Tech

June 11, 2026 · 1 min read

Share

A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting double extortion attacks, while leveraging resources from various ransomware-as-a-service (RaaS) schemes like LockBit (aka Tenacious Mantis), Qilin (aka Pestilent Mantis), and Medusa (aka Venomous Mantis). According to a detailed report

Originally published at thehackernews.com

Share
▸ Want a deeper look?

Talk to an architect about applying this to your stack.

60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.

Skip to main content