One thing I didn't mention in the story is the potential consequences of top RU hackers being outed [...] such as interference and shakedowns from tax authorities and local police, extortion or even kidnapping for their considerable ill-gotten crypto wealth.
That reminds me of that time when Reddit doxxed the alleged Marathon Bomber, ruined his life, and then it turned out it wasn't him.
Aside from all the nicknames, I don't see any evidence.
But the article shows how to doxx responsibly.
Is this group real ? Do they have a page where they display the victims and scenarios? Or this is just another group invented by some people to create some good stories?
Yes, they are real. And quite active. Some unverified source threw around the number of >1000 victims in 2026 alone. I think it was ransomware.live. At least a couple of hundred can be counted as victims with more or less certainty. The affiliates business is very very active currently.. as Brian Krebs summarized in a couple of blog posts already.
Feels like almost everyone with some it background in russia tries to jump on one of the raas as an affiliate at the moment. More and more new faces are entering the stage right now.
Brian on Mastadon:
One thing I didn't mention in the story is the potential consequences of top RU hackers being outed [...] such as interference and shakedowns from tax authorities and local police, extortion or even kidnapping for their considerable ill-gotten crypto wealth.
Oh, the turntables...
I wonder if the article will get translated and spammed to authorities in his locality.
how are you Gentlemen? you have no chance to survive, make your time
Might be interesting, this buymeacoffee page interviews cybercriminals: (https://buymeacoffee.com/insidedarknet/posts)
That reminds me of that time when Reddit doxxed the alleged Marathon Bomber, ruined his life, and then it turned out it wasn't him. Aside from all the nicknames, I don't see any evidence. But the article shows how to doxx responsibly.
These guys must be having a lot of fun running penetration tests with unrestricted AI models.
With enough full access AI running at a company, all they have to do is insert their own unguardrailed AI into the org...
I am shocked, shocked I say, that the head of a ransomware as a service group is based in Russia.
Is this group real ? Do they have a page where they display the victims and scenarios? Or this is just another group invented by some people to create some good stories?
You can find the link to the victims leaks page and screenshots of it working right here:
https://www.ransomlook.io/group/the%20gentlemen
They appear genuinely prolific.
Thank you for the link.
Yes, they are real. And quite active. Some unverified source threw around the number of >1000 victims in 2026 alone. I think it was ransomware.live. At least a couple of hundred can be counted as victims with more or less certainty. The affiliates business is very very active currently.. as Brian Krebs summarized in a couple of blog posts already.
Feels like almost everyone with some it background in russia tries to jump on one of the raas as an affiliate at the moment. More and more new faces are entering the stage right now.
Alexander Yapaev, alias Hastalamuerte, orchestrates a dark digital extortion empire.
[dead]