German authorities have identified Daniil Maksimovich Shchukin, a 31-year-old Russian, as the mastermind behind the notorious ransomware groups REvil and GandCrab, which operated under the handle "UNKN"1. Shchukin is alleged to have orchestrated at least 130 instances of computer sabotage and extortion in Germany between 2019 and 2021. The German Federal Criminal Police, or Bundeskriminalamt (BKA), released an advisory naming Shchukin as the individual behind the UNKN moniker. This development marks a significant breakthrough in the fight against ransomware, as REvil and GandCrab have been responsible for numerous high-profile attacks. The unmasking of Shchukin highlights the importance of operational resilience planning, particularly in sectors vulnerable to ransomware attacks, so practitioners must prioritize proactive measures to mitigate the risk of such attacks.
Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
⚡ High Priority
Why This Matters
Ransomware targeting Russia highlights sector-specific risk — operational resilience planning is the real takeaway.
References
- Krebs, B. (2026, April 6). Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab. Krebs on Security. https://krebsonsecurity.com/2026/04/germany-doxes-unkn-head-of-ru-ransomware-gangs-revil-gandcrab/
Original Source
Krebs on Security
Read original →