Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab
2026-04-06T07:23:31Z•e1d7c47ed99979517e5fa74593a25eac808f531820c76ec2bbdf4951cd10235f
AI_assistants_securityAisuruCanisterWormDDoSGandCrabIoT botnetsIran-backedIran-targetedJackSkidKimwolfMFA_bypassMicrosoft Patch TuesdayMossadREvilStarkillerStrykerbotnet_takedowndoxingphishing-as-a-serviceransomwarewiperzero-day
What happened
KrebsOnSecurity collected multiple high-impact cyber incidents and trends from early 2026: German authorities have identified and doxed “UNKN” as 31-year-old Daniil Maksimovich Shchukin, alleged leader of GandCrab and REvil; a financially motivated group deployed “CanisterWorm,” a worm-like wiper that spreads via misconfigured cloud services and targets systems using Iran time/Farsi; and an Iran-linked actor claims responsibility for a wiper attack that disrupted medtech firm Stryker. US, Canadian and German law enforcement disrupted four large IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad)—t
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- e1d7c47ed99979517e5fa74593a25eac808f531820c76ec2bbdf4951cd10235f
- Enrichment time
- 2026-04-06T07:23:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.