Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-13T01:23:28Z•cde22a6dbe1099b3d8f567ec0212f3d1d85867ce04563b906d24ffc510509146
AI social engineeringAWS GovCloudCISACanvas breachDDoSKimwolfMetaMicrosoft Patch TuesdayRussia-linked infrastructureThe Gentlemenaccount takeoveranti-DDoS abusebotnetcredential leakdata extortiondata leakeducation datalaw enforcementpublic exploitsransomwareserver seizurevulnerabilities
What happened
The feed aggregates multiple high-impact security incidents: a surge in ransomware activity by “The Gentlemen” (now the second-most active gang) with aggressive affiliate recruitment; Microsoft’s June Patch Tuesday fixing nearly 200 flaws (about three dozen rated critical) with public exploit code for at least three bugs; attackers abusing Meta’s AI support assistant to reset Instagram passwords; a major credential/data leak after a CISA contractor published AWS GovCloud keys and internal secrets on GitHub; law enforcement actions including the Netherlands seizing ~800 servers tied to Russian‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- cde22a6dbe1099b3d8f567ec0212f3d1d85867ce04563b906d24ffc510509146
- Enrichment time
- 2026-06-13T01:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.