Ransomware gang The Gentlemen surges to second most active

The Gentlemen, a cybercrime group, has swiftly become the second most active ransomware gang, with 332 reported victims since its establishment in mid-2025. Their aggressive recruitment strategy offers affiliates a 90% share of ransoms, attracting experienced hackers. The group primarily exploits Internet-facing devices like VPNs and firewalls, encrypting entire networks within hours.

Key figure Zeta88, also known as Hastalamuerte, manages the group's operations and recruitment, with links to various cybercrime forums and a real-life identity potentially tied to Alexander Yapaev from Izhevsk. Russian cybercriminals often do not conceal their identities due to government policies that typically overlook cybercrime as long as it does not target Russian citizens.