← Back to Actors
The Gentlemen
The GentlemenStorm-2697GOLD SHERWOOD
[The Gentlemen](https://attack.mitre.org/groups/G1058) is a group that maintains the [The Gentlemen Ransomware](https://attack.mitre.org/software/S9051)-as-a-service (RaaS). [The Gentlemen](https://attack.mitre.org/groups/G1058) was first observed in mid-2025 who had posed [The Gentlemen Ransomware](https://attack.mitre.org/software/S9051) as a closed ransomware and shortly later opened the ransomware as a RaaS to affiliates in September 2025. [The Gentlemen](https://attack.mitre.org/groups/G1058) has been affiliated with the threat group Storm-2697 and GOLD SHERWOOD.(Citation: MSTI_GentelmenR...
17
Techniques
13
Covered
4
Gaps
76%
Coverage
Coverage13/17
GAPS (4)
COVERED (13)
T1018Remote System Discovery52 det.T1027.002Software Packing2 det.T1036Masquerading672 det.T1036.001Invalid Code Signature10 det.T1036.005Match Legitimate Resource Name or Location49 det.T1068Exploitation for Privilege Escalation104 det.T1078Valid Accounts320 det.T1190Exploit Public-Facing Application240 det.T1219.002Remote Desktop Software57 det.T1486Data Encrypted for Impact400 det.T1583.001Domains69 det.T1588.002Tool13 det.T1657Financial Theft15 det.