Related Threat Clusters
-
Global Law Enforcement Dismantles AudiA6 Crypto Laundering Network
On June 11, 2026, international law enforcement agencies, including the U.S. Secret Service and Europol, announced the dismantling of the AudiA6 cryptocurrency laundering network, which laundered over $389 million from…
20 articles · Updated June 11, 2026 -
SideCopy Targets Afghanistan Finance Ministry with XenoRAT Campaign
A Pakistan-linked threat actor, SideCopy, has initiated a spear-phishing campaign against Afghanistan's Ministry of Finance, targeting all 34 provincial revenue directorates. The campaign utilizes a ZIP archive…
5 articles · Updated May 30, 2026 -
Healthcare Cyberattacks Disrupt Patient Care and Expose Sensitive Data
Two major healthcare companies, Boston Scientific and Nutex Health, reported cyberattacks that compromised patient data and disrupted operations. Boston Scientific's systems were breached on August 25, affecting the…
4 articles · Updated August 31, 2026 -
Gentlemen Ransomware Uses Advanced Techniques for Network Attacks
The Gentlemen ransomware, a Go-based RaaS, has been active since mid-2025 and employs aggressive propagation methods. It utilizes 21 remote execution techniques, including PsExec, WMIC, and PowerShell Remoting, to…
3 articles · Updated July 6, 2026 -
Ransomware Group The Gentlemen Linked to Russian National Yapaev
The ransomware group known as The Gentlemen has been linked to Alexander Andreevich Yapaev, a 36-year-old Russian national. This group has rapidly become the second most active ransomware gang, with at least 332 victims…
4 articles · Updated June 10, 2026 -
Ivanti ITSM Vulnerability Allows Privilege Escalation for Authenticated Users
Ivanti disclosed a high-severity vulnerability in its Ivanti Neurons for ITSM platform, tracked as CVE-2026-9614, which allows attackers with valid credentials to escalate privileges and gain full administrative access.…
3 articles · Updated June 3, 2026 -
Dutch Authorities Dismantle 17 Million Device Botnet in Major Cybercrime Operation
Dutch police, in collaboration with the National Cyber Security Centre (NCSC), have dismantled a massive botnet comprising over 17 million infected devices. The operation involved seizing more than 200 servers located…
29 articles · Updated May 29, 2026 -
The Gentlemen Ransomware Group Expands Operations with New Tools
Kaspersky's research reveals that The Gentlemen ransomware group, active since mid-2025, is expanding its operations with new custom-built malware tools. This group targets various industries, including healthcare and…
3 articles · Updated July 1, 2026 -
The Gentlemen Ransomware Group Exploits Fortinet Flaws and AI Tools
The Gentlemen ransomware group has emerged as a significant threat in 2026, exploiting vulnerabilities in Fortinet systems, particularly CVE-2024-55591, an authentication bypass flaw. They have been observed using…
4 articles · Updated June 3, 2026 -
Multiple Ransomware Attacks Target Diverse Industries in September 2026
In early September 2026, several ransomware groups executed attacks on various organizations, including Krybit's assault on Reignwood Park Thailand and Arab Maritime Petroleum Transport Company, Everest's attack on…
22 articles · Updated September 3, 2026
Recent Intelligence Reports
- Ransomware group claims LA Metro as latest target, threatens data leak — Teiss · September 9, 2026
- Ransomware gangs turn on each other, Group-IB says — M.Ajupress · September 9, 2026
- Bitdefender Threat Debrief — Bitdefender · September 8, 2026
- Hackers claim breach of LA Metro, which serves millions of Americans — Cybernews · September 8, 2026
- Ransomware in 2026: What the Data Demands From You - Group — Group-Ib · September 8, 2026
- Beyond Encryption: Why Ransomware Targets Your Backups First — Mobileappdaily · September 2, 2026
- The Gentlemen Ransomware Hackers Use TukTuk C2 to Steal Credentials and Disable EDR Security — Gbhackers · September 2, 2026
- The Gentlemen come calling as Nutex confirms sensitive data theft — Theregister · September 1, 2026