Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Ransomware Gang Abuses Fortinet Flaws With Custom C2 Frameworks
Threat Actors
Malware Families
Excerpt
In May 2026, a massive data dump from a Russian-speaking ransomware crew known as “The Gentlemen” surfaced, shedding light on the inner workings of the year’s second-most-active threat group. The 3,366 leaked Rocket. Chat messages revealed a startling truth: ransomware operators rarely retire; they rebrand. Cross-referencing this leak with past Conti dumps from 2022, Black Basta from 2025 , and LockBit from 2025 reveals the continuity of cybercriminal…
Read the original report →Diamond Model
Adversary(3)
Infrastructure
Capability(5)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2024-55591 | Medium | Score 59/100 | First seen |
IOC Relationship Graph
Building graph…