Threats Tagged 'edr-killer'
View all threats tagged with 'edr-killer'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'edr-killer'
Click on any threat for detailed analysis and mitigation recommendations
0 The Gentlemen is a Russian-speaking ransomware-as-a-service group that emerged in mid-2025 after operating as an affiliate of LockBit and Qilin. The group offers affiliates up to 90% of ransom revenue and has claimed over 800 victims across multiple regions and sectors. The ransomware targets Windows, Linux, NAS, and BSD systems using a double-extortion model that encrypts files and exfiltrates data. Written in Go, the ransomware employs ChaCha20 encryption with multiple speed modes, terminates security processes using vulnerable drivers, and spreads laterally through networks via PsExec. A May 2026 infrastructure breach exposed internal communications, affiliate information, and connections to the Qilin ecosystem. Organizations in the United States and Europe are most frequently targeted, particularly in manufacturing, technology, healthcare, professional services, and retail sectors. Join the discussion | CVE Database V5 | 10/21/2026, 06:20:56 UTC Added: 04/17/2026, 14:23:10 UTC |
Showing 1 to 1 of 1 result