TheGentlemen is a ransomware_group tracked across 3 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed February 18, 2026; most recent activity June 15, 2026.
Researchers found an exposed server on a Russian bulletproof hosting provider containing a complete ransomware toolkit linked to TheGentlemen affiliate. The toolkit includes various utilities for credential dumping,…
The 'Payroll Pirate' campaign has emerged, utilizing advanced phishing and AiTM session hijacking to bypass MFA and reroute payroll disbursements. Targeting mid-market and enterprise organizations, attackers exploit…
The Acronis H2 2025 Cyberthreats Report indicates a significant increase in cyberattacks, with email-based attacks rising 16% per organization and 20% per user year-over-year. Phishing remains the primary entry point…