External Publication
Visit Post

Exposed server leaks TheGentlemen ransomware toolkit, victim credentials, and ngrok tokens

VPN Central [Unofficial] March 31, 2026
Source
An exposed server has revealed what looks like the full working toolkit of a TheGentlemen ransomware affiliate, giving defenders a rare look at how one operator prepared systems for encryption, disabled defenses, and maintained remote access. Hunt.io said the open directory sat on infrastructure tied to Proton66, a Russia-linked bulletproof hosting provider, and contained both […] The post Exposed server leaks TheGentlemen ransomware toolkit, victim credentials, and ngrok tokens appeared first on VPN Central.

Discussion in the ATmosphere

Loading comments...