Who Runs the Ransomware Group 'The Gentlemen?'

Security researchers have identified the administrator of the prolific 'The Gentlemen' ransomware-as-a-service group as Alexander Andreevich Yapaev, a 36-year-old based in Izhevsk, Russia. By tracing digital footprints across cybercrime forums, email addresses, and leaked government databases, investigators linked the operator's aliases 'Hastalamuerte' and 'Zeta88' to his real-world identity.
Why it matters
The de-anonymization of a major ransomware operator highlights the effectiveness of cross-referencing open-source intelligence and leaked data in holding cybercriminals accountable for large-scale digital extortion.
A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointing to a real life identity for the administrator of The Gentlemen ransomware group.
The article reports on cybersecurity research findings using a factual, investigative tone without injecting political commentary or subjective framing.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in