Back Therecord.Media

German police unmask two suspects linked to REvil ransomware gang

Therecord.Media • April 6, 2026

The suspects were named as Daniil Shchukin, a 31-year-old Russian national believed to have used the alias UNKN (UNKNOWN), and Anatoly Kravchuk, a 43-year-old Ukraine-born Russian citizen who investigators say worked as a developer for the group.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

German Authorities Identify Leaders of REvil and GandCrab Ransomware Gangs German Federal Criminal Police (BKA) have identified Daniil Maksimovich Shchukin, 31, and Anatoly Sergeevitsch Kravchuk, 43, as the leaders of the notorious REvil and GandCrab ransomware gangs. Shchukin, known by the alias 'UNKN,' is linked to at least 130 cyberattacks in Germany from 2019 to 2021, resulting in approximately €2 million in ransom payments and over €35 million in economic damage. Both gangs were known for pioneering the double extortion tactic, demanding payments for decryption keys and to prevent data leaks. The BKA has issued a public appeal for information regarding their whereabouts, as both suspects are believed to be in Russia. This identification marks a significant milestone in the ongoing efforts to combat ransomware operations that have plagued organizations globally. The REvil gang, in particular, gained notoriety for targeting large enterprises and conducting high-profile attacks, including the Kaseya incident that affected around 1,500 downstream victims. 13 sources 55

Extracted Entities

German police unmask two suspects linked to REvil ransomware gang

The full story

Extracted Entities

Attack Types (1)

Countries (1)

Ransomware Groups (1)