License to Encrypt: “The Gentlemen” Make Their Move
November 18, 2025 · Cybereason · Severity: CRITICAL
Cybereason's Threat Intelligence Team recently analyzed "The Gentlemen," a ransomware group that emerged in July 2025 with advanced attack methodologies. The group uses a dual-extortion tactic, encrypting sensitive files while also stealing critical business data and threatening to leak it on dark web sites unless victims pay a ransom. Their ability to blend traditional ransomware techniques with newer strategies makes them highly adaptable, posing a persistent threat to global organizations. The Gentlemen's rapid evolution and sophisticated tactics highlight the growing danger of ransomware groups that combine encryption with data theft. Their attacks target businesses worldwide, leveraging stolen data as additional leverage to force ransom payments. This dual-extortion approach increases pressure on victims, making it harder to recover without paying, and underscores the need for robust cybersecurity defenses.
Cybereason Threat Intelligence Team recently conducted an analysis of "The Gentlemen" ransomware group, which emerged around July 2025 as a ransomware threat actor group with relatively advanced methodologies. The Gentlemen group employs a dual-extortion strategy, not only encrypting sensitive files but also exfiltrating critical business data and threatening to publish it on dark web leak sites unless a ransom is paid. The group has demonstrated a unique approach by combining established ransomware techniques with newer strategies, making them quick to adapt to new attack vectors, allowing them to remain a persistent to evolving threat to organizations worldwide.
Key Takeaways
- Cybereason analyzed The Gentlemen, a ransomware group that emerged in July 2025 with advanced attack methodologies.
- The group uses dual-extortion tactics, encrypting sensitive files while stealing critical business data and threatening to leak it on dark web sites.
- Organizations should prepare for dual-extortion ransomware and back up critical data, since The Gentlemen combines encryption with data theft.