
GentleKiller, the EDR-killer framework at the heart of The Gentlemen’s operations
In February 2026, ESET researchers responded to an incident involving an affiliate of The Gentlemen. On the compromised machine, a staging directory caught their attention:










