Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-13T13:23:28Z•cac7f3a06e9e5e7fb4a1063123b9011a80764777c69e1f79b5a4a2c896a396d6
AI social engineeringAWS GovCloudCISACanvasDDoSInstagram account takeoverIoT botnetKimwolfMetaMicrosoftNetherlandsPatch TuesdayRussian influence operationsThe Gentlemenaffiliate programcredential leakdata extortiondata leakeducation sectorhosting abuseinfrastructure seizurepublic GitHubpublic exploitransomwarevulnerabilities
What happened
A collection of KrebsOnSecurity stories from May–June 2026 describes multiple high-impact cyber incidents: a fast-growing ransomware gang (“The Gentlemen”) aggressively recruiting affiliates; Microsoft’s June Patch Tuesday fixing nearly 200 bugs (dozens rated critical, with public exploit code for several); account takeovers via manipulation of Meta’s AI support bot; the dramatic leak of CISA contractor AWS GovCloud keys on a public GitHub repo; the Canvas data-extortion incident threatening ~275 million students and staff; the arrest of an alleged Kimwolf IoT botnet operator; Dutch seizures/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- cac7f3a06e9e5e7fb4a1063123b9011a80764777c69e1f79b5a4a2c896a396d6
- Enrichment time
- 2026-06-13T13:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.