Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-12T07:23:30Z•bc3b0b8542f6b8d55fbf47a2059a15635cd64459f27aa0fb1157ed183befbc61
account-takeoveraws-govcloudbotnetbrazilian-anti-ddos-firmcanvas-breachcisacredential-leakdata-exposureddoseducation-data-extortioninstagramkimwolfmeta-ai-abusemicrosoftpatch-tuesdaypublic-exploit-coderansomwareransomware-affiliate-programrussian-influence-opsserver-seizurethe gentlemenzero-day
What happened
A string of high-impact security incidents and trends was reported: a new ransomware gang, “The Gentlemen,” has rapidly risen in victim count via an aggressive affiliate program (offering up to 90% of ransoms); Microsoft shipped a record Patch Tuesday (~200 fixes, ~36 rated critical) with public exploit code for multiple flaws; attackers abused Meta’s AI support assistant to hijack high-profile Instagram accounts; a CISA contractor publicly exposed AWS GovCloud keys and internal secrets on GitHub, triggering congressional inquiries; Dutch authorities seized ~800 servers and arrested hosting co
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- bc3b0b8542f6b8d55fbf47a2059a15635cd64459f27aa0fb1157ed183befbc61
- Enrichment time
- 2026-06-12T07:23:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.