Threats Behind the Mask of Gentlemen Ransomware
Gentlemen is a new ransomware group first identified around August 2025. The group operates a double extortion model that involves breaching corporate networks, exfiltrating data, encrypting the data, and then using the encrypted data to extort victims. During the breach, the group employs typical tactics seen in advanced ransomware groups,
An Unerring Spear: Cephalus Ransomware Analysis
Cephalus is a new ransomware group that first appeared in mid-June 2025. The group claims that they are motivated 100% by financial gain. Their main method of breaching organizations is by stealing credentials through Remote Desktop Protocol (RDP) accounts that do not have multi-factor authentication (MFA) enabled. Their operation is
Gunra Ransomware Emerges with New DLS
AhnLab TIP monitors the current ransomware group activities across dark web forums, marketplaces, and other sources. Through the Live View > Dark Web Watch menu, users can track the most active ransomware groups, uncover their collaborations, and gain insights into planned attacks and techniques—enabling user organizations to anticipate threats, prepare
Report on Ransomware Attacks Targeting Korean Companies
Overview In recent years, ransomware attacks have been increasing worldwide, with Korean companies also experiencing a rise in cases. Especially since 2023, there has been a sharp surge in ransomware incidents targeting the Asia region, highlighting the need for a systematic analysis of this trend and its impact.
Threat Trend Report on Deep Web & Dark Web – Ransomware Groups & Cybercrime Forums and Markets in August 2024
Note This trend report on the deep web and dark web of August 2024 is sectioned into Ransomware, Forums & Black Markets, and Threat Actor. We would like to state beforehand that some of the content has yet to be confirmed to be true. Major Issues 1) Ransomware
Ransom & Dark Web Issues Week 3, July 2024
ASEC Notes publishes Ransom & Dark Web Issues Week 3, July 2024
Ransom & Dark Web Issues Week 3, July 2024
ASEC Blog publishes Ransom & Dark Web Issues Week 3, July 2024
Threat Trend Report on Deep Web &Dark Web – Ransomware Groups & Cybercrime Forums and Markets in June 2024
Note This trend report on the deep web and dark web of June 2024 is sectioned into Ransomware, Forums & Black Markets, and Threat Actor. We would like to state beforehand that some of the content has yet to be confirmed to be true. Major Issues 1.
Ransom & Dark Web Issues Week 3, Jun 2024
ASEC Notes publishes Ransom & Dark Web Issues Week 3, Jun 2024
Threat Trend Report on Deep Web & Dark Web – Ransomware Groups & Cybercrime Forums and Markets of December 2023
Note This trend report on the deep web and dark web of December 2023 is sectioned into Ransomware, Forums & Black Markets, and Threat Actors. We would like to state beforehand that some of the content has yet to be confirmed to be true. Major Issues 1) Ransomware
