News
threat-intel Gemini-Compatible AI Browsers Could Help Scammers Run Thousands of Fake Accounts, Researchers Warn - GBHackers threat-intel Industrial Defender Unifies Endpoint Intelligence and Network Monitoring for CIP-015, Adds Risk Signal - GBHackers cybersecurity Google Chrome Uses Gemini AI to Detect Fake Antivirus, Browser Update, and ClickFix Scams - CyberPress cybersecurity Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) - SANS Internet Storm Center cybersecurity A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse - Wired Security cybersecurity OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor - SecurityWeek threat-intel Gentlemen Ransomware Hackers Hijack Legitimate Lenovo Drivers to Disable Security Software - GBHackers ai The Download: introducing the Impossible issue - MIT Technology Review cybersecurity China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors - The Hacker News cybersecurity Cloudflare Detects Early Attacks Exploiting Critical PHP Flaws, Deploys WAF Rules - CyberPress threat-intel Cloudflare Warns of Active Exploitation Attempts Against Two Leaked PHP Flaws - GBHackers ai OpenAI models are coming to Google Cloud - OpenAI - ChatGPT & AI Research cybersecurity Critical security issue affecting PHP - NCSC UK threat-intel BRONZE SANDCASTLE Hackers Steal Active Directory Database Using Hidden Windows Backdoors - GBHackers ai Nvidia and Anthropic partner to enhance AI security with OpenShell integration - Crypto Briefing - Anthropic - Claude AI
1 / 15
All news ›
Threat Intel

Gentlemen Ransomware Hackers Hijack Legitimate Lenovo Drivers to Disable Security Software

GBHackers ·

The Gentlemen ransomware operation is abusing legitimate Lenovo and Safetica kernel drivers to terminate security software, weakening endpoint defenses before encryption. Acronis Threat Research Unit researchers identified two custom dropper samples during a recent incident, exposing how the group weaponizes vulnerable drivers rather than relying exclusively on conventional process termination commands The technique, known as […] The post Gentlemen Ransomware Hackers Hijack Legitimate Lenovo Drivers to Disable Security Software appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.