Thegentlemen
Thegentlemen is a ransomware group with a financial motive, tracked by Brandefense. It targets 20 sectors, including Government and Technology, in 81 countries, including the United States and the United Kingdom. It uses 42 MITRE ATT&CK techniques and exploits 1 known CVE.
- Storm-2697
- The Gentlemen Group
- Techniques
- 42
- Exploited CVEs
- 1
- First seen
- Sep 9, 2025
- Last seen
- Sep 7, 2026
- Record updated
Who They Target.
About Thegentlemen.
The Gentlemen is a RaaS group that emerged in July-August 2025, rapidly claiming over 320 victims across 17+ countries by offering affiliates a 90% revenue share, deploying a Go-based locker against Windows, Linux, NAS, and BSD systems; a compromised C2 server in 2026 revealed more than 1,570 linked victims.
Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.