Search/The Gentlemen
● Threat actor

The Gentlemen

The Gentlemen is a group that maintains the The Gentlemen Ransomware-as-a-service (RaaS). The Gentlemen was first observed in mid-2025 who had posed The Gentlemen Ransomware as a closed ransomware and shortly later opened the ransomware as a RaaS to affiliates in September 2025. The Gentlemen has been affiliated with the threat group Storm-2697 and GOLD SHERWOOD.

Also known asStorm-2697GOLD SHERWOOD
Claimed attacks
0
Top country hit
—
Countries targeted
0
Last activity
—
Intelligence Reports8
8 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium
Dark Web Presence2
2 known leak sites tracked

Known .onion/clearnet leak sites for this group, with live status — unlock with Premium.

Upgrade to Premium
Connections
97 relationships