Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-17T01:23:31Z•30e4bd3fc096e0b3afc1bc354a1b072e690a7d195e52759e22239ac0c1471215
AI social engineeringAWS GovCloudCISACanvas breachDDoSGitHub leakInstagramKimwolfMicrosoftPatch TuesdayRussian influence operationsThe Gentlemenaccount takeoverbotnetcredential exposurecritical vulnerabilitiesdata extortionhosting abusepublic exploit coderansomware
What happened
Collection of KrebsOnSecurity reports (May–June 2026) describing multiple high‑impact cyber incidents: an emergent ransomware cartel called “The Gentlemen” rapidly scaling via aggressive affiliate revenue shares; a record Microsoft Patch Tuesday fixing ~200 vulnerabilities (dozens rated critical and several with public exploit code); abuse of Meta’s AI support assistant to reset and seize Instagram accounts; Dutch seizures/arrests of hosting operators accused of enabling Russian cyber operations; a major CISA contractor leak that exposed AWS GovCloud keys and extensive internal secrets on GitH
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 30e4bd3fc096e0b3afc1bc354a1b072e690a7d195e52759e22239ac0c1471215
- Enrichment time
- 2026-06-17T01:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.