logo

Who Runs the Ransomware Group ‘The Gentlemen?’

ID: 6e4e83f2-c71a-594a-8356-0b70631669b8

STIX ID: report--6e4e83f2-c71a-594a-8356-0b70631669b8

Feed Name: Krebs on Security

Threat Score
75/100

Date Published: 2026-06-10

Date Updated: 2026-06-10

Author: BrianKrebs

...
...

**Executive summary:** The Gentlemen is a rapidly expanding ransomware-as-a-service gang that has claimed at least 332 victims since mid-2025 and uses an aggressive 90/10 affiliate revenue split to recruit operators; Check Point reports the group targets internet-facing devices (VPNs, firewalls) and can encrypt networks within hours. OSINT from multiple providers links the administrator aliases Hastalamuerte/Zeta88 to online accounts, Telegram identifiers, and a phone number that pivot to records naming Alexander Andreevich Yapaev in Izhevsk, suggesting a likely real-world identity while outlining the group's operations and growth.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.