THREAT OPS › Threat News › Who Runs the Ransomware Group ‘The Gentlemen?’
Who Runs the Ransomware Group ‘The Gentlemen?’
<p>A cybercrime group known as <strong>The Gentlemen</strong> has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware gro
Attributed threat actors
MITRE ATT&CK techniques
Indicators of compromise
- https://research.checkpoint.com/2026/thus-spoke-the-gentlemen/url
- https://www.kelacyber.com/blog/the-gentlemen-ransomware-internal-chat-leak-analysis-2026/url
- https://connectionrequired.com/gitspective/#/timeline/SantaLaMuerteurl
- hastalamuerte1488@protonmail.comemail
- bu4vs@mail.ruemail
- ke-la.comdomain
- catalyst.prodaft.comdomain