Related Threat Clusters
-
Ransomware Toolkit Exposed: TheGentlemen Affiliate's Operations Uncovered
Researchers found an exposed server on a Russian bulletproof hosting provider containing a complete ransomware toolkit linked to TheGentlemen affiliate. The toolkit includes various utilities for credential dumping,…
3 articles · Updated March 30, 2026 -
ServiceNow and PaperCut Vulnerabilities Under Active Exploitation
ServiceNow has released patches for multiple vulnerabilities rated CVSS 10.0, indicating critical security flaws. Concurrently, the CVE-2026-82078 vulnerability in PaperCut has been confirmed as actively exploited in…
17 articles · Updated August 31, 2026 -
Payroll Pirate Campaign Targets Payroll Systems Using AiTM Session Hijacking
The 'Payroll Pirate' campaign has emerged, utilizing advanced phishing and AiTM session hijacking to bypass MFA and reroute payroll disbursements. Targeting mid-market and enterprise organizations, attackers exploit…
2 articles · Updated June 15, 2026 -
Surge in Cyberattacks: Phishing and Ransomware on the Rise
The Acronis H2 2025 Cyberthreats Report indicates a significant increase in cyberattacks, with email-based attacks rising 16% per organization and 20% per user year-over-year. Phishing remains the primary entry point…
5 articles · Updated February 18, 2026
Recent Intelligence Reports
- Seasia Infotech Ransomware Attack by Thegentlemen — Socradar · September 2, 2026
- EP Manufactu... Ransomware Attack by Thegentlemen — Socradar · September 1, 2026
- Payroll Pirate Campaign Uses AiTM Session Hijacking to Bypass MFA and Redirect Salaries — Gbhackers · June 15, 2026
- Exposed Ransomware Toolkit Tied to TheGentlemen Affiliate — Socprime · March 30, 2026
- Exposed Server Reveals TheGentlemen Ransomware Toolkit, Victim Credentials, and Ngrok Tokens — Cybersecuritynews · March 30, 2026
- Exposed Server Leaks TheGentlemen Ransomware Toolkit, Credentials, and Ngrok Tokens — Gbhackers · March 30, 2026
- Acronis, Inc. | Globenewswire — Via.Ritzau.Dk · February 18, 2026