src_4a349ec95eeb880450
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- May 11, 2026 14:05 UTC
- Retrieved
- Oct 08, 2026 03:52 UTC
Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware
The EtherRAT malware family was first reported by Sysdig back in December 2025. At that time, the initial access vector was exploitation of CVE-2025-55182 (React2Shell) targeting Linux servers. In March 2026, a Windows variant campaign was reported by Atos, with their investigation showing evidence of activity going back to the previous December. In April, we […] The post Flash Alert: EtherRat and
Reference details
- Source category
- Research & news
- Report title
Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware- First reported
- May 11, 2026 14:05 UTC
- Last reported
- May 11, 2026 14:05 UTC
- Catalog updated
- Oct 08, 2026 03:52 UTC
- Record ID
634d7a9ae9274bdf4f6668b308afe20e7b733667cd39ab49e98fe7067f0d3e96
CVEs mentioned by sources
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_4a349ec95eeb880450Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.