German federal authorities (BKA) have publicly named Daniil Maksimovich Shchukin, alias ‘UNKN,’ as the alleged operational leader of the GandCrab and REvil ransomware-as-a-service operations, issuing a formal arrest warrant. REvil is linked to the 2021 Kaseya VSA and JBS Foods attacks; GandCrab is estimated to have extorted over $2 billion globally before shutting down in 2019. Shchukin remains at large in Russia, so no operational disruption to successor ransomware ecosystems should be assumed. Organizations should treat this as a threat-landscape update rather than a threat eliminated.