Inside GentleKiller: The EDR-Killer Powering The Gentlemen

Multiple high-impact security events and vulnerabilities reported: a new EDR-killer toolkit (“GentleKiller”) used by The Gentlemen to disable security controls ahead of ransomware; FortiBleed — an industrial-scale credential-spraying operation that leaked credentials for ~74,000 Fortinet devices with active exploitation and a CISA alert; a global takedown of the SocGholish malware infrastructure and cleanup of ~15K WordPress sites; an exposed Elasticsearch collection of ~24 billion stolen credentials; clipboard-stealing (clipper) malware targeting crypto seed phrases; an information leak from: