Who Runs the Ransomware Group ‘The Gentlemen?’
2026-06-18T13:23:29Z•ed8c6181897f473db27aa7f04754c9bb6b23a71eabaeda009bb052b70f154874
275 million recordsAI social engineeringAWS GovCloudCISACanvas breachGitHub leakInstagram account takeoverIoT botnetJune 2026KimwolfMetaMicrosoft Patch TuesdayThe Gentlemenaffiliate modelarrested operator DDoS attacks','Netherlands takedown','hosting,botnetcredential leakdata extortiondata leakeducation sectorpublic exploit coderansomwareransomware adminvulnerabilitieszero-day
What happened
A set of high-impact cyber incidents and investigations: a new analysis of 'The Gentlemen' ransomware group (now the second-most active by victim count) details aggressive affiliate recruitment (offers up to 90% of ransoms) and clues toward the administrator’s real-world identity. Microsoft’s June 2026 Patch Tuesday fixed nearly 200 vulnerabilities (a record), including ~36 rated critical and at least three with public exploit code. Meta’s AI support assistant was abused to hijack high-profile Instagram accounts via social-engineered password resets. The U.S. CISA suffered an egregious leak: a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- ed8c6181897f473db27aa7f04754c9bb6b23a71eabaeda009bb052b70f154874
- Enrichment time
- 2026-06-18T13:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.