Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-16T07:23:29Z•a53e95055476bdea9b4ee118eaef0717b84c6f6107188c591019053685b267f1
AWS GovCloudCISAai-abusebotnetcanvascredentials-exposuredata-extortiondata-leakddoseducation-breachinstagramkimwolflaw-enforcementmetamicrosoft-patch-tuesdaynetherlandspatch-managementpublic-exploit-coderansomwaresocial-engineering
What happened
This collection of KrebsOnSecurity items describes multiple high-impact cyber incidents and trends in May–June 2026: a record Microsoft Patch Tuesday with nearly 200 fixes (including dozens rated critical and at least three flaws with public exploit code); a major CISA-related data leak in which a contractor published AWS GovCloud keys and internal build/deploy documentation to GitHub; social-engineered Instagram account takeovers leveraging Meta’s AI support bot; the emergence and rapid growth of the ransomware group “The Gentlemen” (aggressive affiliate recruitment offering ~90% payouts); a大
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- a53e95055476bdea9b4ee118eaef0717b84c6f6107188c591019053685b267f1
- Enrichment time
- 2026-06-16T07:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.