Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-18T07:23:27Z•3347f2c82b89dfef31546a096d247f0b950fb8a5763efea1f2980518f73b9b72
AI support botAWS GovCloudCISACanvasDDoSInstagramKimwolfMetaMicrosoft Patch TuesdayNetherlandsRussiaThe Gentlemenaccount takeoveraffiliatesbotnetcredential leakdata extortiondata leakeducation sector breachhosting abuselaw enforcementpublic exploitransomwarevulnerabilitieszero-day
What happened
A set of high-impact security incidents and trends reported by KrebsOnSecurity: emergence of the ransomware group “The Gentlemen” with an aggressive 90% affiliate revenue model and rapid victim growth; Microsoft’s June 2026 Patch Tuesday fixing ~200 vulnerabilities (a record), including dozens marked critical and at least three with public exploit code; abuse of Meta’s AI support assistant to perform Instagram account takeovers (including high-profile accounts); a major data/credential leak after a CISA contractor published AWS GovCloud keys and internal build/deploy secrets on GitHub; law-enf
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 3347f2c82b89dfef31546a096d247f0b950fb8a5763efea1f2980518f73b9b72
- Enrichment time
- 2026-06-18T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.