Unmasking The Gentlemen: Tracking a Ransomware Empire's Hidden Administrator

The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly expanding through an aggressive affiliate recruitment strategy offering an unusually generous 90/10 revenue split compared to the industry standard 80/20. Security researchers at Check Point Software and Intel 471 have traced the group's administrator, using the aliases Hastalamuerte and Zeta88, to Izhevsk in Russia's Udmurt Republic through careful analysis of digital footprints across cybercrime forums. This case demonstrates both the increasing sophistication of organized cybercrime operations and the growing capability of international cyber threat intelligence to identify and expose even high-level threat actors.