The New Menace of Corporate Networks: Gentlemen Ransomware

The cybersecurity world is facing a new and ruthless ransomware group called "Gentlemen" that steals and encrypts companies' sensitive data. Emerging in August 2025, this gang, rather than attacking randomly, specifically targets medium and large-scale enterprises in critical sectors such as manufacturing, construction, and healthcare.

Moving quite stealthily once it infiltrates the system, the software instantly disables security measures and data backup services before starting the encryption process. Requiring a special password upon execution to evade analysis by security experts, this malware quickly locks systems by fully encrypting small files and only partially encrypting large files to save time. Moreover, if victims do not pay the ransom, it blackmails them with the threat of publishing all the seized confidential data on the internet.

Some of the precautions we need to take to protect against these types of attacks include:

• Do not open emails from untrusted sources.

• Use multi-factor authentication (MFA).

• Keep your system updated to the latest version at all times.

• Monitor login logs regularly.

• Track the security of mobile devices.

  
  

  For detailed information, you can reach out to our experts at info@zerosecond.ae