Exposed server leaks TheGentlemen ransomware toolkit, victim credentials, and ngrok tokens
VPN Central [Unofficial]
March 31, 2026
An exposed server has revealed what looks like the full working toolkit of a TheGentlemen ransomware affiliate, giving defenders a rare look at how one operator prepared systems for encryption, disabled defenses, and maintained remote access. Hunt.io said the open directory sat on infrastructure tied to Proton66, a Russia-linked bulletproof hosting provider, and contained both […]
The post Exposed server leaks TheGentlemen ransomware toolkit, victim credentials, and ngrok tokens appeared first on VPN Central.
Discussion in the ATmosphere