Who Runs the Ransomware Group 'The Gentlemen?'

78 points
1/21/1970
4 days ago
by Bender

Comments


throwa356262

Brian on Mastadon:

One thing I didn't mention in the story is the potential consequences of top RU hackers being outed [...] such as interference and shakedowns from tax authorities and local police, extortion or even kidnapping for their considerable ill-gotten crypto wealth.

Oh, the turntables...

4 days ago

Hnrobert42

I wonder if the article will get translated and spammed to authorities in his locality.

3 days ago

fsckboy

how are you Gentlemen? you have no chance to survive, make your time

a day ago

Cider9986

Might be interesting, this buymeacoffee page interviews cybercriminals: (https://buymeacoffee.com/insidedarknet/posts)

4 days ago

exiguus

That reminds me of that time when Reddit doxxed the alleged Marathon Bomber, ruined his life, and then it turned out it wasn't him. Aside from all the nicknames, I don't see any evidence. But the article shows how to doxx responsibly.

2 days ago

AtlasBarfed

These guys must be having a lot of fun running penetration tests with unrestricted AI models.

With enough full access AI running at a company, all they have to do is insert their own unguardrailed AI into the org...

3 days ago

TomMasz

I am shocked, shocked I say, that the head of a ransomware as a service group is based in Russia.

3 days ago

alexb87

Is this group real ? Do they have a page where they display the victims and scenarios? Or this is just another group invented by some people to create some good stories?

3 days ago

technion

You can find the link to the victims leaks page and screenshots of it working right here:

https://www.ransomlook.io/group/the%20gentlemen

They appear genuinely prolific.

3 days ago

lschueller

Thank you for the link.

Yes, they are real. And quite active. Some unverified source threw around the number of >1000 victims in 2026 alone. I think it was ransomware.live. At least a couple of hundred can be counted as victims with more or less certainty. The affiliates business is very very active currently.. as Brian Krebs summarized in a couple of blog posts already.

Feels like almost everyone with some it background in russia tries to jump on one of the raas as an affiliate at the moment. More and more new faces are entering the stage right now.

a day ago

thisisauserid

Alexander Yapaev, alias Hastalamuerte, orchestrates a dark digital extortion empire.

4 days ago

khana

[dead]

3 days ago