The Gentlemen - Mass Service Termination

Georg Lauenstein@gsec

•updated Apr 2, 2026•2•0•122

Detects mass service termination targeting backup, database, and virtualization services. The Gentlemen stop Veeam, SQL, Oracle, SAP, Acronis, BackupExec, PostgreSQL, Docker, and VMware services before encryption.