Digital Warfare Podcast Daily Brief June 22, 2026

The Digital Warfare Podcast · Jun 22, 2026 · 4m · transcript

Summary

ESET researchers detailed how the Gentlemen ransomware group is using an internally maintained EDR killing framework called GentleKiller to disable endpoint security before encryption begins. Unlike many ransomware operations that leave EDR evasion to affiliates, Gentlemen centrally develops, maintains, and distributes EDR disabling tools. GentleKiller abuses vulnerable kernel level drivers through BYOVD techniques to terminate security processes from Ring Zero, making ransomware deployment more reliable and harder to stop.

Key Takeaways

• Gentlemen became one of the most active…