OTX Threat: The Gentlemen: A closer look at a not-so-gentle ransomware-as-a-service operation

The Gentlemen is a Russian-speaking ransomware-as-a-service group that emerged in mid-2025 after operating as an affiliate of LockBit and Qilin. The group offers affiliates up to 90% of ransom revenue and has claimed over 800 victims across multiple regions and sectors. The ransomware targets Windows, Linux, NAS, and BSD systems using a double-extortion model that encrypts files and exfiltrates da CVEs: CVE-2025-70795 Sectors: Manufacturing, Technology, Healthcare