Public ID of 'UNKN' Links REvil and GandCrab to €35M Damage
German authorities have publicly identified the elusive ransomware leader known as 'UNKN' as 31-year-old Daniil Maksimovich Shchukin. This attribution connects a real individual to the leadership of the notorious GandCrab and REvil ransomware groups, responsible for at least 130 extortion acts causing over €35 million in economic damage. Shchukin's identity was corroborated by details including his age, name, and co-conspirator, and aligns with a February 2023 U.S. Justice Department filing that sought seizure of cryptocurrency linked to REvil's proceeds.
This public doxing transforms an opaque online alias into a concrete investigatory target, enabling law enforcement to focus asset seizures, prosecutions, and victim attribution efforts. For most defenders, this development does not require immediate technical action but signals enhanced prospects for legal and intelligence operations against ransomware leadership. It may also prompt short-term operational shifts among related threat