As cited
Copy frozen at (site build).
ransomware
The Gentleman Ransomware | Defense Evasion TTPs Uncovered | Huntress
Huntress researchers documented two incidents involving The Gentlemen ransomware that employed defense evasion techniques, including clearing logs and attempting to add antivirus exclusions to avoid detection. These tactics suggest the threat actors are actively working to obstruct forensic analysis and security tools during attacks.
Why it matters: Organizations running Windows systems should review endpoint logging and antivirus configurations to detect unauthorized exclusion attempts, and ensure log retention policies prevent attackers from covering their tracks post-compromise.
- Source published
- First seen by Cybersecurity Tracker