Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Intentionally Inflated Go Binaries That Use Massive PE Overlays.
The ransomware group **The Gentlemen** has become the second most active ransomware gang by victim count, with over 332 victims since mid-2025 and 240 in 2026 alone. The group operates as a ransomware-as-a-service (RaaS) model, offering affiliates an unusually high 90% cut of ransoms, far above the industry standard 80/20 split.
A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.
A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims.
The ransomware group **The Gentlemen** has become the second most active ransomware gang by victim count, leveraging an aggressive recruitment strategy that offers affiliates 90% of ransom payments—far above the industry standard 80/20 split. According to **Check Point Software**, the group has claimed at least 332 victims since mid-2025, with over 240 attacks in 2026 alone.
A company that's expecting a cyberattack but hasn’t actively prepared for it risks making the hardest decisions.