Who Runs the Ransomware Group 'The Gentlemen?'

https://krebsonsecurity.com/2026/06/who-runs-the-ransomware-group-the-gentlemen/

by Bender • 1 month ago

79 11 1 month ago

Brian on Mastadon:

One thing I didn't mention in the story is the potential consequences of top RU hackers being outed [...] such as interference and shakedowns from tax authorities and local police, extortion or even kidnapping for their considerable ill-gotten crypto wealth.

Oh, the turntables...

Hnrobert42• 1 month ago

I wonder if the article will get translated and spammed to authorities in his locality.

fsckboy• 1 month ago

how are you Gentlemen? you have no chance to survive, make your time

Cider9986• 1 month ago

Might be interesting, this buymeacoffee page interviews cybercriminals: (https://buymeacoffee.com/insidedarknet/posts)

thisisauserid• 1 month ago

Alexander Yapaev, alias Hastalamuerte, orchestrates a dark digital extortion empire.

alexb87• 1 month ago

Is this group real ? Do they have a page where they display the victims and scenarios? Or this is just another group invented by some people to create some good stories?

technion• 1 month ago

You can find the link to the victims leaks page and screenshots of it working right here:

https://www.ransomlook.io/group/the%20gentlemen

They appear genuinely prolific.

lschueller• 1 month ago

Thank you for the link.

Yes, they are real. And quite active. Some unverified source threw around the number of >1000 victims in 2026 alone. I think it was ransomware.live. At least a couple of hundred can be counted as victims with more or less certainty. The affiliates business is very very active currently.. as Brian Krebs summarized in a couple of blog posts already.

Feels like almost everyone with some it background in russia tries to jump on one of the raas as an affiliate at the moment. More and more new faces are entering the stage right now.

AtlasBarfed• 1 month ago

These guys must be having a lot of fun running penetration tests with unrestricted AI models.

With enough full access AI running at a company, all they have to do is insert their own unguardrailed AI into the org...

TomMasz• 1 month ago

I am shocked, shocked I say, that the head of a ransomware as a service group is based in Russia.

exiguus• 1 month ago

That reminds me of that time when Reddit doxxed the alleged Marathon Bomber, ruined his life, and then it turned out it wasn't him. Aside from all the nicknames, I don't see any evidence. But the article shows how to doxx responsibly.

Who Runs the Ransomware Group 'The Gentlemen?'

Related Stories