krebsonsecurity.com 6/10/2026, 2:21:00 PM · external

Ransomware gang The Gentlemen surges to second most active

Developing story malware 2 articles tracked
Gentlemen ransomware gang surges to second most active by victim count
CyberSIXT Evidence Panel Source marked as original reporting
Threat Actor

THE Gentlemen, a cybercrime group, has swiftly become the second most active ransomware gang, with 332 reported victims since its establishment in mid-2025. Their aggressive recruitment strategy offers affiliates a 90% share of ransoms, attracting experienced hackers. The group primarily exploits Internet-facing devices like VPNs and firewalls, encrypting entire networks within hours.

Key figure Zeta88, also known as Hastalamuerte, manages the group's operations and recruitment, with links to various cybercrime forums and a real-life identity potentially tied to Alexander Yapaev from Izhevsk. Russian cybercriminals often do not conceal their identities due to government policies that typically overlook cybercrime as long as it does not target Russian citizens.

View full article

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline