Cybersecuritynews iconCybersecuritynewsOct 21, 2026

Hackers Use Gentlemen Ransomware to Disable Windows Defender and Destroy Backups

A ransomware operation known as The Gentlemen is using a mix of security tampering, service disruption and file encryption to make recovery harder for affected organizations. Its Windows malware can turn off Microsoft Defender’s real-time protection, add broad exclusions that reduce scanning, stop backup-related servic

Hackers Use Gentlemen Ransomware to Disable Windows Defender and Destroy Backups

Share this story

Send the public story page.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app