Who Runs the Ransomware Group ‘The Gentlemen?’

2026-06-15T19:23:31Zc5d59666adea4836be11eaf17a24488a22aa5986b2602cf2395721855f5dcf4e
AWS GovCloudCISACanvasDDoSGitHub leakInstagram compromiseKimwolfMeta AIMicrosoft Patch TuesdayRussia-linked infrastructureThe Gentlemenaccount takeoverbotnetdata exfiltrationdata extortiondata leakeducation platformhosting providerslaw enforcement arrestspublic exploit coderansomwarevulnerabilitieszero-day

What happened

KrebsOnSecurity feed covering multiple high-impact incidents: investigative piece linking an identity to the ransomware group “The Gentlemen”; Microsoft’s June 2026 Patch Tuesday fixing nearly 200 vulnerabilities (dozens rated critical and at least three with public exploit code); attackers abusing Meta’s AI support bot to hijack Instagram accounts; Dutch authorities seizing ~800 servers and arresting two operators tied to Russian cyber influence/attack infrastructure; a major CISA contractor leak that exposed AWS GovCloud keys and internal CISA repositories on public GitHub prompting Congress

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
c5d59666adea4836be11eaf17a24488a22aa5986b2602cf2395721855f5dcf4e
Enrichment time
2026-06-15T19:23:31Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.