{"id":230991,"date":"2026-06-13T03:35:08","date_gmt":"2026-06-13T07:35:08","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/06\/13\/who-runs-the-ransomware-group-the-gentlemen-krebs-on-security\/"},"modified":"2026-06-13T03:35:11","modified_gmt":"2026-06-13T07:35:11","slug":"who-runs-the-ransomware-group-the-gentlemen-krebs-on-security","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/06\/13\/who-runs-the-ransomware-group-the-gentlemen-krebs-on-security\/","title":{"rendered":"Who Runs the Ransomware Group \u2018The Gentlemen?\u2019 \u2013 Krebs on Security"},"content":{"rendered":"<p><a href=\"https:\/\/krebsonsecurity.com\/2026\/06\/who-runs-the-ransomware-group-the-gentlemen\/\">Who Runs the Ransomware Group \u2018The Gentlemen?\u2019 \u2013 Krebs on Security<\/a><\/p>\n<p><a href=\"https:\/\/krebsonsecurity.com\/2026\/06\/who-runs-the-ransomware-group-the-gentlemen\/\">https:\/\/krebsonsecurity.com\/2026\/06\/who-runs-the-ransomware-group-the-gentlemen\/<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-06-10 10:55:26<\/a><\/p>\n<p>Source Domain: <a href=\"krebsonsecurity.com\">krebsonsecurity.com<\/a><\/p>\n<p><strong>Summary:<\/strong><br \/>\nThe cybercrime group known as The Gentlemen has become the second most active ransomware gang by victim count, employing aggressive recruitment tactics to poach hackers from other programs by offering an unusually high 90 percent share of ransom payments. Security firm Check Point Software has identified Hastalamuerte, operating under the nickname Zeta88, as its primary administrator, a figure who not only controls the RaaS platform and manages payments but also develops malware. Intel 471 identified multiple online personas tied to Izhevsk-based Russian citizen Alexander Yapaev, corroborated by accounts linked to government and social media databases. The investigation points to Yapaev\u2019s early lack of operational security, which contributed to his identification. The threat research group PRODAFT also corroborated these findings, revealing further operational details aligned with Hastalamuerte\/Yapaev as the administrator.<\/p>\n<p><strong>Key Points:<\/strong><\/p>\n<ul>\n<li>The Gentlemen ransomware group is highly successful, being the second most active by victim count, employing aggressive recruitment strategies.<\/li>\n<li>The group\u2019s administrator, Hastalamuerte\/Zeta88, is identified as Russian national Alexander Yapaev, based on multiple correlating online and government records.<\/li>\n<li>Yapaev\u2019s failure to safeguard his online identity led to his identification as part of The Gentlemen\u2019s inner operations, including ransomware development and payment management.<\/li>\n<li>The investigation underscores how operational security mistakes in early criminal careers often provide clear clues about an individual\u2019s identity.<\/li>\n<li>PRODAFT&#8217;s detailed analysis supports the persona of Zeta88\/Hastalamuerte, focusing on his direct involvement in affiliate access, ransomware development using AI, and post-exploitation activities.<\/li>\n<\/ul>\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Who Runs the Ransomware Group \u2018The Gentlemen?\u2019 \u2013 Krebs on Security https:\/\/krebsonsecurity.com\/2026\/06\/who-runs-the-ransomware-group-the-gentlemen\/ Publish Date: 2026-06-10&#8230;<\/p>\n","protected":false},"author":1,"featured_media":230992,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2026\/06\/thegentlemen.png","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,32],"class_list":["post-230991","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-malware"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/230991"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=230991"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/230991\/revisions"}],"predecessor-version":[{"id":230994,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/230991\/revisions\/230994"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/230992"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=230991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=230991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=230991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}