#8
The Hacker News
general
June 19, 2026 at 18:33 UTC
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
By [email protected] (The Hacker News)
AI Summary
The Gentlemen ransomware-as-a-service operation distributes a mature EDR-killing framework called GentleKiller to affiliates, which targets approximately 400 distinct security processes to disable defenses before deploying the encryptor. The RaaS incorporates both proprietary and third-party EDR termination tools, reflecting an industrialization of defense evasion capabilities. Security teams should audit which EDR processes are most susceptible to BYOVD or direct termination attacks.
Relevance score: 77.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →