Who Runs the Ransomware Group ‘The Gentlemen?’
ID: 6e4e83f2-c71a-594a-8356-0b70631669b8
STIX ID: report--6e4e83f2-c71a-594a-8356-0b70631669b8
Feed Name: Krebs on Security
**Executive summary:** The Gentlemen is a rapidly expanding ransomware-as-a-service gang that has claimed at least 332 victims since mid-2025 and uses an aggressive 90/10 affiliate revenue split to recruit operators; Check Point reports the group targets internet-facing devices (VPNs, firewalls) and can encrypt networks within hours. OSINT from multiple providers links the administrator aliases Hastalamuerte/Zeta88 to online accounts, Telegram identifiers, and a phone number that pivot to records naming Alexander Andreevich Yapaev in Izhevsk, suggesting a likely real-world identity while outlining the group's operations and growth.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
