Who Runs the Ransomware Group ‘The Gentlemen?’
Ransomware group 'The Gentlemen' administrator identified as Russian national Alexander Andreevich Yapaev.
The ransomware group 'The Gentlemen' has rapidly grown to become the second most active ransomware gang, attracting hackers with a generous 90% affiliate revenue split. Security researchers have identified the group's administrator, known as Zeta88 and previously Hastalamuerte, as Alexander Andreevich Yapaev, a Russian national from Izhevsk. Yapaev's digital footprint across multiple cybercrime forums and linked accounts provides strong evidence for this identification.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Check Point Software?
Get an email when a new story names Check Point Software, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe identification of 'The Gentlemen' ransomware leader demonstrates how cybercriminals often leave extensive digital footprints across forums and platforms, yet continue operating due to inadequate threat intelligence gathering and incident response coordination. The group's rapid growth to become the second most active ransomware operation highlights how attractive affiliate models (90% revenue splits) can quickly scale criminal enterprises. Organizations often lack the threat intelligence capabilities and cross-platform monitoring needed to identify and respond to emerging ransomware groups before they become major threats.
Vendors in this story
How we list vendors
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- email — hastalamuerte1488@protonmail.com
- malware — The Gentlemen