Back Blogs.Microsoft

The Gentlemen ransomware: Dissecting a self

Blogs.Microsoft •Microsoft Threat Intelligence • May 28, 2026

Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by affiliates of Storm-2697 that combines per-file ephemeral key encryption with an aggressive self-propagation module to deploy itself across an entire network using series of simultaneous lateral movement techniques per target.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Ransomware Fuels Surge in Global Cyberattacks As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses in securing their networks against evolving cyber threats. 1498 sources 64

Extracted Entities

The Gentlemen ransomware: Dissecting a self

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

MITRE ATT&CK (2)

Ransomware Groups (1)