#CVE_2024_55591
LightNews LightNews
threadlinqs.bsky.social
The FBI seized RAMP's ransomware forum. The gangs didn't vanish - they just rebranded on Rehub. https://intel.threadlinqs.com/threat/TL-2026-2532 #ThreatIntel #CVE_2024_55591 #CVE_2025_32433 #DragonForce
Rehub: Russian-Language Ransomware-as-a-Service Marketplace Absorbing RAMP's Displaced Operators
September 16, 2026 at 11:36 AM
threadlinqs.bsky.social
The Gentlemen crew breach FortiGate VPNs, blind EDR with stolen kernel drivers, then encrypt everything. https://intel.threadlinqs.com/threat/TL-2026-2271 #ThreatIntel #CVE_2024_55591 #GentleKiller #MimiKatz
The Gentlemen RaaS (GOLD SHERWOOD / hastalamuerte): FortiGate/VPN Intrusion Chain, GentleKiller BYOVD EDR Killers, and Rclone Exfiltration
September 1, 2026 at 1:00 PM
threadlinqs.bsky.social
The Gentlemen just dethroned Qilin - its GentleKiller shuts down 400+ EDR processes before the lock. https://intel.threadlinqs.com/threat/TL-2026-1332 #ThreatIntel #CVE_2024_55591 #CVE_2025_32433 #GentleKiller
The Gentlemen RaaS overtakes Qilin as #1 ransomware operation, wields GentleKiller EDR-killer framework (400+ processes, 8 BYOVD variants) and 90% affiliate payouts
July 14, 2026 at 8:57 PM
threadlinqs.bsky.social
The Gentlemen ransomware worms itself across Windows domains and encrypts everything before you blink. https://intel.threadlinqs.com/threat/TL-2026-1138 #ThreatIntel #CVE_2024_55591 #CVE_2025_32433 #SystemBC
The Gentlemen Ransomware: Worm-Like Self-Propagation and Network-Wide Encryption via Storm-2697's RaaS Affiliate Program
July 6, 2026 at 9:07 PM