Automated Ransomware Pipeline Exposed Amid Vexy Ransomware Attack

• •The Gentlemen ransomware group automated extortion affecting 30 companies.
• •Vexy Ransomware targeted Strad Solutions, threatening data release.
• •AI tools were used for exploitation and ransom demand calculations.

An exposed server linked to The Gentlemen ransomware group revealed an automated extortion pipeline affecting around 30 companies, with 3.1TB of data exfiltrated. The AI-driven system drafted ransom demands, with costs ranging from 40 cents to four dollars per victim. The server was discovered on July 22, 2026, and was designed to exploit misconfigured GitLab instances. Meanwhile, on September 12, 2026, the Vexy Ransomware group targeted Strad Solutions, threatening to release sensitive data unless negotiations were successful. This incident highlights the growing threat of ransomware attacks on critical infrastructure providers. The attacks utilize advanced AI tools for exploitation and ransom calculations, posing significant risks to enterprise and mid-sized organizations.