German authorities identified Daniil Maksimovich Shchukin, 31, as "UNKN," the operator behind ransomware gangs GandCrab and REvil. Shchukin directed at least 130 extortion and computer sabotage attacks against German victims between 2019 and 2021. The identification marks a rare attribution of a major ransomware leadership figure to a specific individual with confirmed identity and photograph. GandCrab operated from roughly 2018 to 2021 before its operators claimed to retire. REvil emerged as a successor group, conducting high-profile attacks including the 2021 JBS Foods incident and Kaseya supply-chain compromise. Law enforcement's public doxing of Shchukin signals escalating pressure on Russian cybercriminal infrastructure. The disclosure provides defenders with confirmed attribution linking two distinct ransomware families to shared leadership and operational continuity. Organizations should review incident logs for GandCrab and REvil artifacts dating to 2019-2021 and correlate attack patterns with the 130 documented German incidents to identify potential additional victims or infrastructure overlap.