ESET Research investigates Gentlemen ransomware gang and its defense-evasion tools

Gentlemen ransomware uses multiple EDR killers to disable defenses

The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers to help affiliates evade detection in attacks. [...]

ESET Research investigates Gentlemen ransomware gang and its defense-evasion tools

Gentlemen operators develop and maintain an EDR-killer suite provided directly to affiliates.GentleKiller, an in-house framework, has at least eight variants abusing different vulnerable or malicious drivers.Gentlemen operators apply a unified evasion strategy across tools to standardize impersonation and protection.Third-party EDR…

The Gentlemen Ransomware Gang Standardizes EDR Killing | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

Cybercrime , Fraud Management & Cybercrime , Ransomware Eset Links Group's Growth to Integrated Endpoint-Killing Tools Tiffany Wang • June 18, 2026     Image: Shutterstock/ISMG Prolific ransomware group The Gentlemen is anything but mild and calm with endpoint detection and response, say researchers who found that the extortionists have turned EDR killing into a […] Thank you for subscribing to our RSS feed! The post The Gentlemen Ransomware Gan…

Killing me gently: Inside Gentlemen’s EDR killer framework

ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen

GentleKiller targets more than 400 security processes across 48 products

Gentlemen EDR killers are built and maintained by the ransomware gang's operators and handed to affiliates to disable endpoint security.