Scworld
Gentlemen Ransomware Targets Global Industries Amid LLM Integration
First seen 17 Dec 2025, 07:58 UTC
•



+17
•57% similarity
•48.3
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Gentlemen ransomware operation has affected at least 17 countries across the Americas, Asia-Pacific, and the Middle East, targeting sectors such as manufacturing, healthcare, construction, and insurance. This operation employs a double extortion model and utilizes various evasion techniques, including the deactivation of Windows Defender. Concurrently, the integration of Large Language Models into ransomware operations is facilitating the creation of Ransomware-as-a-Service, lowering entry barriers for cybercriminals.
ThreatCluster AI