Gentlemen’s New ‘GentleKiller’ Framework Lets Ransomware Bypass EDRs in Days
ESET’s 2026 analysis reveals the ransomware‑as‑a‑service gang Gentlemen runs a home‑grown ‘GentleKiller’ suite that can disable endpoint detection and response tools within hours of a vulnerability’s disclosure. The framework integrates third‑party killers and spoofed vendor signatures, widening the gang’s reach beyond the US. Defenders must watch for its driver‑based evasion tricks.