Unmasking The Gentlemen Ransomware: Tactics, Techniques, And Procedures Revealed
Trend Micro, Tuesday, September 9th, 2025
An analysis of the Gentlemen ransomware group, which employs advanced, adaptive tactics, techniques, and procedure to target critical industries worldwide.
In August 2025, we investigated a new ransomware campaign orchestrated by The Gentlemen, an emerging and previously undocumented threat group. This threat actor quickly established itself within the threat landscape by demonstrating advanced capabilities through their systematic compromise of enterprise environments. By adapting their tools mid-campaign-shifting from generic anti-AV utilities to highly targeted, specific variants-the attackers demonstrate versatility and determination, posing a significant threat to organizations regardless of their security defenses.