Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

KrebsOnSecurity roundup of mid‑2026 threats: German authorities say 31‑year‑old Daniil Maksimovich Shchukin (handle “UNKN”) led GandCrab and REvil and has been doxxed; law enforcement in the U.S., Canada and Germany disrupted four massive IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) that had compromised ~3+ million devices and enabled record DDoS campaigns; the Kimwolf botmaster (“Dort”) and Kimwolf activity (including abuse of I2P) are under scrutiny. New offensive tooling and campaigns include the CanisterWorm worm that spreads via poorly secured cloud services and wipes systems with Iran