Ransomware Group Gentlemen Uses Custom EDR Killers in Cyberattacks

The ransomware group known as Gentlemen develops and maintains its own EDR (Endpoint Detection and Response) killers, dubbed GentleKiller, for use by its affiliates. Security firm ESET has analyzed the group’s arsenal, which is actively employed in attacks. France is among the targeted regions, though no specific timeline or victim details were provided. The tools are designed to neutralize EDR solutions, enabling the ransomware to operate undetected. No CVEs or additional technical specifications were disclosed in the report.