German Police Identify Alleged GandCrab and REvil Leaders
Summary
Germany’s BKA identified Daniil Shchukin and Anatoly Kravchuk as alleged GandCrab and REvil leaders, linking them to at least 130 extortion cases. Authorities estimate over $40 million in damage and seek information on their whereabouts.
Key points
- The BKA identified Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk as alleged leaders of GandCrab and REvil from early 2019 until at least July 2021.
- German authorities say the pair participated in at least 130 extortion cases targeting companies in Germany.
- Authorities say at least 25 victims paid $2.2 million in ransom; estimated total damage exceeds $40 million.
- The BKA says Shchukin used the monikers UNKN and UNKNOWN and represented the ransomware operation on cybercrime forums.
- The BKA believes the suspects are in Russia and released photos, including tattoo images, while asking the public for information.
- REvil, also known as Sodinokibi, emerged from GandCrab affiliates and later used leak sites and data auctions to pressure victims.
Article Details
- Event Type
- German authorities identified two alleged leaders of the GandCrab and REvil ransomware operations and requested public assistance locating them.
- Impact
- The BKA says Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk were linked to at least 130 extortion cases targeting German companies. At least 25 victims reportedly paid $2.2 million in ransom, and total damages are estimated to exceed $40 million.
Threat Actors
Anatoly Sergeevitsch KravchukThe BKA identified him as a leader of the GandCrab and REvil operations and says he was linked to extortion cases targeting German companies.REvilRansomware operation whose leaders the BKA says included Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk.SodinokibiThe article identifies Sodinokibi as another name for REvil.UNKNThe BKA identified him as a leader of the GandCrab and REvil operations and says he was linked to extortion cases targeting German companies.
Malware
GandCrabGermany’s Federal Police (BKA) have identified Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk as the leaders of the GandCrab and REvil ransomware operations from early 2019 until at least July 2021.REvilGermany’s Federal Police (BKA) have identified Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk as the leaders of the GandCrab and REvil ransomware operations from early 2019 until at least July 2021.SodinokibiREvil, also known as Sodinokibi, was formed from previous GandCrab affiliates and operators who had already learned the successful tactics and started to apply them to their operations.
Countries
GermanyGermany’s Federal Police (BKA) have identified Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk as the leaders of the GandCrab and REvil ransomware operations from early 2019 until at least July 2021.RussiaBKA has posted photos and tattoo images, added entries to the EU’s Most Wanted portal, and requests public assistance to locate the suspects believed to be in Russia.