Reported by 2 outlets
Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.80 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.47 / 0.6 · time to second source
- Recency
- × 0.01 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
CloudSEK pieced together the full operation of a Gentlemen ransomware affiliate who calls himself Azazel after finding an exposed open directory and a misconfigured storage server on his infrastructure. GBHackers' coverage adds that Azazel also ran LEAKNED, an independent leak site. Per the CloudSEK team's own writeup, every victim outside one large AI-company breach was reached through stolen CI/CD secrets, GitLab variable stores, and git history rather than malware-driven initial access.
The notable technique: Azazel registered a reverse shell as a tool inside an AI coding assistant and drove attack execution through it over MCP, using an exec_in_session call against a loopback-bound port. CloudSEK states it found no prior public reporting of MCP used operationally as a C2 channel in a live campaign. He also scanned the internet for exposed MCP ports under an internet-census-mcp-scanner fingerprint, which suggests exposed MCP endpoints are already a targeting criterion. A single GitLab instance hosted pipelines for two unrelated organizations, so one stolen token landed in both victim environments.
Treat AI assistant tool registrations as remote-execution channels, not developer conveniences, and inventory MCP endpoints alongside other internet-facing services. Rotate CI/CD and GitLab tokens, audit git history for embedded secrets, and flag shared pipeline instances that span organizational boundaries. Details in syndicated coverage are truncated, so victim specifics should wait on the full CloudSEK report before being repeated.
Timeline
-
original reporting
Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks
gbhackers.com · 7d ago · October 6th, 2026
A Russian-speaking Gentlemen ransomware affiliate used the Model Context Protocol (MCP) to execute commands during live intrusions, turning an AI coding assistant’s tool interface into an operational command-and-control channel. CloudSEK identified the activity while investigating exposed infrastructure belonging to an operator calling himself Azazel. Azazel also operated LEAKNED, an independent leak site that allegedly diverted […] The post Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cloudsek.com
Inside the Gentlemen Ransomware Affiliate’s Operation
cloudsek.com · 7d ago · October 6th, 2026
New investigation from our team. An exposed open directory and a misconfigured storage server gave up the entire operation of a Gentlemen ransomware affiliate who calls himself Azazel. The highlights: Every victim outside the big AI-company breach was reached through stolen CI/CD secrets, GitLab variable stores and git history. One GitLab instance was hosting pipelines for two unrelated orgs, so a single token got into both. He registered a reverse shell as a tool inside an AI coding assistant and drove attack execution through it over MCP (exec_in_session against a loopback-bound port). We couldn't find prior public reporting of MCP used operationally as a C2 channel in a live campaign. He was also scanning the internet for exposed MCP ports under the fingerprint " internet-census-mcp-sca
via reddit r/cybersecurity: Inside the Gentlemen Ransomware Affiliate’s Operation