G1058 The Gentlemen

Enterprise

also known asThe Gentlemen · Storm-2697 · GOLD SHERWOOD

The Gentlemen is a group that maintains the The Gentlemen Ransomware-as-a-service (RaaS). The Gentlemen was first observed in mid-2025 who had posed The Gentlemen Ransomware as a closed ransomware and shortly later opened the ransomware as a RaaS to affiliates in September 2025. The Gentlemen has been affiliated with the threat group Storm-2697 and GOLD SHERWOOD.

01

canonical actor

The group this is attributed to.

03

software used (3)

Malware and tools associated with this.

04

source

Where this definition is published.