Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-16T01:23:27Z•424035b2e1612c257be1a6e85e7facdd42dcb69b5b7706c544cd9701fd13312f
AWS GovCloudCISACanvas breachDDoSGitHub exposureKimwolfMeta AI support botMicrosoft Patch TuesdayNetherlands seizuresRussian influence operationsThe Gentlemenaccount takeoverbotnetcredential leakcritical vulnerabilitiesdata extortiondata leakincident responselaw enforcementpublic exploit coderansomwarevulnerability management
What happened
A series of high-impact cyber incidents and vulnerabilities were reported: a prolific ransomware group called “The Gentlemen” has rapidly expanded via aggressive affiliate recruitment; Microsoft shipped a record ~200 Patch Tuesday fixes (nearly three dozen rated critical) with public exploit code available for multiple flaws; attackers abused Meta’s AI support assistant to hijack high-profile Instagram accounts; a CISA contractor publicly leaked AWS GovCloud keys and internal secrets on GitHub; law enforcement seized 800+ servers tied to Russian-backed operations and arrested related hosting-f
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 424035b2e1612c257be1a6e85e7facdd42dcb69b5b7706c544cd9701fd13312f
- Enrichment time
- 2026-06-16T01:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.