BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

Germany's BKA has identified the real-world identities of key leaders behind the REvil (Sodinokibi) ransomware-as-a-service operation.

• •Daniil Maksimovich Shchukin (alias UNKN), a 31-year-old Russian national, is identified as the group's representative and leader active from early 2019 to July 2021.
• •Anatoly Sergeevitsch Kravchuk, a 43-year-old Russian national, is alleged to have served as REvil's developer during the same period.
• •The two suspects are linked to 130 ransomware attacks in Germany, causing over €35.4 million in damages, with 25 cases resulting in €1.9 million in ransom payments.
• •REvil, an evolution of GandCrab, targeted high-profile victims including JBS and Kaseya before ceasing operations in October 2021 amid law enforcement pressure.
• •