BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

Apr 6, 2026

Germany’s Federal Criminal Police Office (aka BKA or the Bundeskriminalamt) has unmasked the real identity of the main threat actors associated with the now-defunct REvil (aka Sodinokibi) ransomware-as-a-service (RaaS) operation.
The threat actor, who went by the alias UNKN, functioned as a representative of the group, advertising the ransomware in June 2019 on the XSS cybercrime forum. He 

Get Free Report & Network Analysis

Please check your email for the free report.