EarlyNarratives
Pricing
Get free briefStart free trial
Get free brief
Signal

German authorities identify Daniil Shchukin as leader of GandCrab and REvil ransomware gangs

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-04-06 02:07 UTCUpdated 2026-04-06 15:02 UTC
redditrss
cveexploitsbreachesmalwarethreat_actorsadvisories
Source links open
Source links and full evidence are open here. Pro adds archive history, compare-over-time, alerts, exports, and workflow. Business adds Feed API integrations and team usage.
BackEvidence (4)Get the free brief by emailStart free trial
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
limited source diversity in top sources
View all evidence
Overview

German Federal Criminal Police (BKA) revealed that Daniil Maksimovich Shchukin, known as UNKN, led the Russian ransomware groups GandCrab and REvil.

Entities
GandCrabREvilDaniil Maksimovich ShchukinAnatoly Sergeevitsch Kravchuk
Score total
1.78
Momentum 24h
4
Posts
4
Origins
3
Source types
2
Duplicate ratio
0%
Why now
  • The BKA recently published an advisory revealing the identities behind major ransomware gangs.
  • This disclosure follows investigations into over 130 ransomware attacks in Germany.
  • Highlighting these actors underscores ongoing ransomware risks and law enforcement efforts.
Why it matters
  • Identifying ransomware leaders aids law enforcement in disrupting cybercrime networks.
  • Understanding double extortion tactics helps organizations improve defenses.
  • Attribution supports international cooperation against ransomware threats.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
  • Daniil Maksimovich Shchukin, aka UNKN, led the GandCrab and REvil ransomware gangs responsible for numerous attacks in Germany.
How sources frame it
  • German Federal Criminal Police (BKA): neutral
All evidence
All evidence
Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
blueteamsec · krebsonsecurity.com · 2026-04-06 12:53 UTC
BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks
thehackernews · thehackernews.com · 2026-04-06 06:59 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 4
Top publishers (this list)
  • SC Media (1)
  • blueteamsec (1)
  • thehackernews (1)
Top origin domains (this list)
  • scworld.com (1)
  • krebsonsecurity.com (1)
  • thehackernews.com (1)