Ransomware Group The Gentlemen Linked to Russian National Yapaev

The ransomware group known as The Gentlemen has been linked to Alexander Andreevich Yapaev, a 36-year-old Russian national. This group has rapidly become the second most active ransomware gang, with at least 332 victims reported since mid-2025. They utilize a ransomware-as-a-service model, offering affiliates a lucrative 90% revenue share from ransoms. The group primarily targets internet-facing devices such as VPNs and firewalls, encrypting entire networks within hours. Investigations by Check Point and Intel 471 have connected Yapaev to the group through various digital footprints including email addresses and social media profiles. Russian cybercriminals often operate with minimal repercussions, provided they avoid domestic targets. The Gentlemen's aggressive recruitment strategy has significantly increased their activity and impact in the cybercrime landscape.

Key Points: • The Gentlemen ransomware group is linked to Russian national Alexander Yapaev. • The group has claimed at least 332 victims since mid-2025, making them the second most active ransomware gang. • They employ a ransomware-as-a-service model with a 90% revenue share for affiliates, targeting VPNs and firewalls.