logo

BKA unmasks two REvil Ransomware operators behind 130+ German attacks

ID: 8e08647c-03ec-5694-9fed-ee065e1a9dab

STIX ID: report--8e08647c-03ec-5694-9fed-ee065e1a9dab

Feed Name: Security Affairs

Threat Score
78/100

Date Published: 2026-04-06

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

Germany's BKA publicly identified two alleged REvil/GandCrab operators—Daniil Shchukin (aka UNKN) and Anatoly Kravchuk—linking them to more than 130 ransomware attacks in Germany that caused over €35 million in damage and nearly €2 million in extorted funds; the report also recounts related convictions, REvil's history (including the Kaseya incident), and law-enforcement actions against affiliates.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.