Germany Doxes UNKN: Russian Ransomware Boss Daniil Shchukin Named as Head of REvil & GandCrab

The anonymous hacker known as "UNKN," the elusive leader behind the notorious Russian ransomware groups GandCrab and REvil, has been publicly identified. German authorities have named 31-year-old Russian national Daniil Maksimovich Shchukin as the individual who ran both cybercrime syndicates. The German Federal Criminal Police (Bundeskriminalamt or BKA) alleges Shchukin was directly involved in at least 130 acts of computer sabotage and extortion targeting German victims between 2019 and 2021.

The BKA's advisory also names a second Russian, 43-year-old Anatoly Sergeevitsch Kravchuk, as a co-conspirator. According to the German police, the duo executed approximately two dozen cyberattacks that successfully extorted nearly 2 million euros from victims. These attacks are estimated to have caused total economic damages exceeding 35 million euros. The identification marks a significant escalation in the public pressure campaign against the leadership of these groups, which were among the most prolific and damaging ransomware operations globally before their disruptions.

This public doxing by a major European law enforcement agency signals intense international scrutiny on the individuals behind Russia-based ransomware cartels. While the advisory focuses on crimes within Germany, it underscores the persistent operational links between the GandCrab and REvil groups and applies direct reputational and legal pressure on their alleged architects. The move isolates specific actors from the veil of online anonymity, potentially complicating their ability to operate and recruit, even if they remain beyond immediate physical reach.