German authorities identify REvil and GandCrab ransomware bosses

**Executive summary:** German Federal Police (BKA) have identified Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk as alleged leaders of the GandCrab and REvil ransomware operations between 2019 and 2021; the groups are linked to at least 130 extortion cases, an estimated $40M+ in damages, roughly $2.2M in known ransom payments from ~25 victims, and major incidents including the Kaseya supply‑chain attack that impacted around 1,500 downstream victims. The report outlines the groups' affiliate model, use of leak sites and data auctions to pressure victims, past law‑enforcement disruptions and arrests, and that the suspects are believed to be in Russia with authorities seeking public assistance to locate them.