Loading the current evidence view. Navigation and account controls remain available.
Indicator investigation
Loading the current evidence view. Navigation and account controls remain available.
Loading verdict, provenance, relationships and sightings.
Indicator
Type cve · source CISA KEV
Shared non-noise tags (narrow join).
tags: attack:t1003, attack:t1018, attack:t1021.002, attack:t1057, attack:t1059.001, attack:t1070.001
tags: attack:t1003, attack:t1018, attack:t1021.002, attack:t1057, attack:t1059.001, attack:t1070.001
tags: attack:t1027, attack:t1053.005, attack:t1059.001, attack:t1071.001, attack:t1082, attack:t1083
tags: attack:t1027, attack:t1053.005, attack:t1059.001, attack:t1071.001, attack:t1082, attack:t1083
tags: attack:t1027, attack:t1053.005, attack:t1059.001, attack:t1071.001, attack:t1082, attack:t1083
tags: attack:t1027, attack:t1053.005, attack:t1059.001, attack:t1071.001, attack:t1082, attack:t1083
tags: cwe-288
High-signal pivots without leaving the thread you started in search.
Structured pivots from local graph context.
Full investigation canvas with neighbor expansion.
tags: cwe-288
Title/body text match only.
The State of Ransomware – Q1 2026 Key Findings Ransomware in Q1 2026: Consolidation at Scale During the first quarter of 2026, we monitored more than 70 active data leak sites (DLS) that collectively listed 2,122 new victims. This figure represents a 12.2% decline from the Q4 20
No Manners Here: The Ruthless Rise of The Gentlemen Ransomware Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more here. The post No Manners Here: The Ruthless Rise of The Gentlemen Ransomware appeared first on
FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned. FBI, South Korea wa
Ransomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat Landscape Written by: Bavi Sadayappan, Zach Riddle, Ioana Teaca, Kimberly Goody, Genevieve Stark Introduction Since 2018, when many financially motivated threat actors began shifting their moneti
Thus Spoke…The Gentlemen Key Points Introduction The Gentlemen ransomware‑as‑a‑service (RaaS) operation is a relatively new group that emerged around mid‑2025. Its operators advertise the service across multiple underground forums, promoting their ransomware platform and invitin