ThreatVectr
Tag

#RaaS

5 stories taggedRaaS.

A dimly lit screen showing fake ransomware recovery interface overlaid with banking and money transfer forms, representing the dual scam of posing as a rescuer
Ransomware

Fake 'Ransom Busters' Service Is Actually a Ransomware Insider Running a Side Scam

A criminal pretending to rescue hack victims is really a ransomware affiliate trying to pocket ransom money before his own gang gets it.

4 min read
Criminal operations control center aesthetic: multiple monitors displaying a sleek dashboard interface with malware building tools, victim management panels, an
Ransomware

DevMan Ransomware Runs a One-Stop Web Portal for Its Criminal Affiliates

Swiss researchers say the operation, tracked as Funky Mantis, gives partners a single dashboard to build malware, chase payments, and manage victims.

3 min read
Illustration: a glowing server rack in a dark data centre
AI Security

An AI Agent Ran a Ransomware Attack by Itself. Here's What That Means.

Criminals used an AI tool called Langflow to let a machine plan and carry out a multi-step ransomware intrusion without a human guiding every move, a shift that could make attacks faster and cheaper to run at scale.

3 min read
Illustration: a darkened server rack with one indicator LED glowing amber while neighboring LEDs are dark
Ransomware

The Gentlemen RaaS Ships an In-House EDR Killer to Affiliates

GentleKiller bundles signed-driver abuse with third-party utilities and a kill list of roughly 400 security processes, handed out as part of the affiliate package.

3 min read
Illustration: a dimly lit apartment workstation in a generic Eastern European city at night
Threat Intelligence

Tracing 'The Gentlemen' RaaS: OPSEC Trail Points to an Izhevsk Operator

A 90/10 affiliate split rocketed the crew to second place by victim count. The administrator's forum breadcrumbs are considerably less disciplined.

3 min read
© 2026 Threat Vectr