Germany Doxes "UNKN," Head of RU Ransomware Gangs REvil, GandCrab

https://krebsonsecurity.com/2026/04/germany-doxes-unkn-head-of-ru-ransomware-gangs-revil-gandcrab/

67•Bender•1h ago

Comments

alexmocki•1h ago

This reads less like “hacking” and more like an optimized business.

Clear specialization, outsourcing, and reinvestment — very similar to how startups scale.

raverbashing•1h ago

Ah yes a business like the mafia

tgv•1h ago

The parent commenter has apparently never heard of organized crime.

kgeist•1h ago

Found his record in Russia's official company registry. This is what he officially does as an entepreneur:

  56.10 — Restaurant activities and food delivery services

  47.23 — Retail sale of fish, crustaceans, and mollusks in specialized stores

  47.25.12 — Retail sale of beer in specialized stores

  47.25.2 — Retail sale of soft drinks in specialized stores

  47.29.39 — Retail sale of other food products in specialized stores, not included in other groups

  68.20 — Lease and management of own or leased real estate

Money is reinvested into selling beer and fish :) Interestingly, he registered all that in 2019, just when the ransoms started.

ivan_gammel•59m ago

Classic money laundering.

wat10000•21m ago

Go look at the al Qaeda emails recovered from the raid that killed bin Laden and you'll find all the same stuff. Turns out that the way businesses operate is just a good way to operate human organizations in general, whether their goal is to sell widgets or blow up infidels.

Phelinofist•1h ago

Spiegel recently did a video on them: https://www.youtube.com/watch?v=HuwRrqM6H1M

nailer•30m ago

Feels odd for an infosec blog to use 'doxxing' this way. Doxxing is generally considered to be unethical exposure of personal information.

Identifying a criminal is ethical.

cucumber3732842•27m ago

>Identifying a criminal is ethical.

This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards.

Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thing but a necessary one because all the other options are worse. Like shooting someone in self defense, or putting someone in a cage for doing sufficiently bad things.

wat10000•25m ago

"Identifying a criminal" doesn't imply that it's done by the government, and being done by the government doesn't imply that it's done to a criminal. This comment seems like quite a leap.

jstanley•18m ago

It's the government who defines what "criminal" means.

wat10000•11m ago

Not necessarily. I'm free to make my own determination on the matter.

dmos62•24m ago

Innocent until proven guilty (in a court of law)?

wswin•16m ago

not the state, but the law

gigatexal•13m ago

ethics and morality are not interchangeable are they?

anyway individuals willingly give to teh state some autonomy in return for the safety of governance... that's the social contract free people have with government

"doxxing" a Russian ransomware group is the kind thing to do. bombing them out of existence is within the remit of the range of ideas a government could resort to...

mc32•6m ago

Not disagreeing with your preface but I was under the impression that while it took governments some time to figure things out, kinetic bombing in retaliation for cyberwarfare was pretty much ruled out unless the cyberwarfare results in direct mass casualties (for example cyber sabotaging a refinery results in an explosion which results in casualties.). Else we’d have bombed North Korea, China, Ukraine, Russia, Romania, etc.

moffkalast•26m ago

I think they obviously just took it as 'exposure of personal information' period.

KingOfCoders•5m ago

Putting someone on a (most) wanted list is "doxing"?

[Edit] "An international search is underway for Daniil Maksimovich SHCHUKIN on suspicion of numerous counts of gang-related and commercial extortion using ransomware to the detriment of commercial enterprises, public facilities, and institutions."

mc32•2m ago

Unfortunately language tends to get diluted. Nowadays in pop culture it means publishing anyone's personal information, usually against their wishes.

Anthropic is burning more and more dev goodwill

The economic impact of the global energy crisis

World's Longest Outdoor Escalator Opened in China – Takes 20 Minutes to Ascend

Show HN: ReverseCam – See yourself as others see you

Show HN: Tiny TUI for disk usage exploration

Why Do These Three Angles Sum to 45 Degrees? (animated geometric proof)

Detect malicious packages by triggering their behavior in a sandbox

Show HN: Molchanica. Structural bio GUI / Rust tools

Show HN: MCP 2000 – Browser-based drum machine with AI-generated sounds

LLM Wiki Compiler Inspired by Karpathy

A Cryptography Engineer's Perspective on Quantum Computing Timelines

The secretive plan for a Maine data center collapsed in 6 days

Happy City Index 2026

The Platform That Fights Bots by Eliminating People

Outcome over Process

Key Findings About How Americans View Artificial Intelligence

The Iran War Just Broke the Petrodollar

Linux Executes Binaries: ELF and Dynamic Linking Explained

Sky – an Elm-inspired language that compiles to Go

Claude Code Down

Show HN: Detect phantom and unused dependencies across multiple languages

Self-Hosting from Scratch

5 Years of Lessons from Running My Own Bookstore

Open Source Lawyers and AI

Multi-model intelligence in MS Copilot Researcher

Ask HN: What do you use the internet for?

Cowardice of the AI plagiarist: Writers risk becoming ventriloquist's dummies

Show HN: Kubernetes cluster simulation that runs in the browser to prepare CKA

The Family That Decided to Have Their Stomachs Removed

Amounts of nanoplastics discovered in tap and bottled water