#ParsedReport #CompletenessMedium
05-10-2026

Caught in 4K: The Gentlemen Files

https://www.cloudsek.com/blog/caught-in-4k-the-gentlemen-files

Report completeness: Medium

Actors/Campaigns:
Gentlemen_ransomware (motivation: sabotage)
Azazel

Threats:
Aurora_ransomware
Gentlemen_ransomware
Penelope_tool
Supply_chain_technique
Hermes
Rclone_tool
Restic_tool

Victims:
Logistics, Insurance, Pharmaceutical, Artificial intelligence, Medical devices, Government adjacent infrastructure

Industry:
Healthcare, Logistic

Geo:
Russian

TTPs:
Tactics: 2
Technics: 1

ChatGPT TTPs:
do not use without manual check
T1020, T1021.004, T1041, T1074.001, T1078, T1110.002, T1140, T1190, T1528, T1530, have more...

IOCs:
IP: 5
Domain: 1
File: 1

Soft:
MinIO, Jenkins, PostgreSQL, Redis, Kubernetes, linux

Functions:
ENC

Languages:
python

Platforms:
intel