Live data from Hacker News

German police name alleged leaders of GandCrab and REvil ransomware groups

krebsonsecurity.com

111–120 of 175 posts

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#111
post #24

Putting someone on a (most) wanted list is "doxing"? [Edit] "An international search is underway for Daniil Maksimovich SHCHUKIN on suspicion of numerous counts of gang-related and commercial extortion using ransomware to the detriment of commercial enterprises, public facilities, and institutions."

Yeah, I’m not okay with this. Doxxing is a term with an extremely negative connotation and is often done to people who, bluntly, weren’t hiding or doing anything wrong. The correct term for the same act here is either “accuse” or “unmask”.

It implies to me they _shouldn't_ be releasing his name. In this case it sounds like they very much should be naming him.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#112

Putting someone on a (most) wanted list is "doxing"? [Edit] "An international search is underway for Daniil Maksimovich SHCHUKIN on suspicion of numerous counts of gang-related and commercial extortion using ransomware to the detriment of commercial enterprises, public facilities, and institutions."

I do not understand this logic either. They take GDPR way too serious haha. JK obv.

Wait. Is that what's happening here? Are they expecting the international criminal to be given a right to privacy until he's convicted?

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#113

How is "this is the name of the formerly anonymous extortionist" doxxing? Unless there's something not covered in the article, his current address, family members, phone, etc were not listed. That's not doxxing; that's "here's a guy were want to arrest."

It seems to me that the meaning of the word "doxxing" has slowly drifted to mean "revealing information about somebody without their consent", be it by state actor, a company or an individual. BTW, what do you think will happen when people find out that their neighbor is secretly a pretty wealthy criminal? Attempts of theft, robbery and extortion have happened in the wake of such announcements. There was even a case…

what do you think will happen when people find out that their neighbor is secretly a pretty wealthy criminal?

Who knows, but I'm also not sure how you avoid that situation. Presumably, to be "doxxed" like this, there's substantive evidence he is actually the criminal. Strikes me as just one more downside of being a successful (but now identified) extortionist.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#114
post #82

Earlier quoted context omitted.

German govt is also one of the most corrupt and vastly incompetent govt. It's run by bunch of boomers. Most of the prolific ransomware gangs have terrible opsec. De-anon'ing them is child's play. Most of the opsec-aware TAs never even get attributed, let alone get caught for any breaches.

> One of the most corrupt It's on like place 10 out of 180, which makes it one of the least corrupt places. It also has some surprisingly non-boomer departments, like the Sovereign Tech Fund. Either way you need to celebrate police doing good things and immoral actors being exposed, it can only have good outcomes. Perhaps it deters them, or deters the next generation of such hackers. Or at least it makes their life l…

> surprisingly non-boomer departments, like the Sovereign Tech Fund

The one that has just invested in Scala? In year 2026? There are many good things about Germany, but competence in tech is not one of them.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#115
post #89

Some of the comments here (and lately on HN in general) are very concerning to me. Are we really going to pretend that people accused of real crimes shouldn’t be arrested, charged and, if found guilty, have an appropriate sentence? It doesn’t take many more than 2 brain cells rubbing together to see that that won’t end well. Whataboutism, political differences, and even real injustices in my opinion do not make this…

It probably depends on what people think about the laws that define what a "real crime" is. E.g. in germany it was a real crime to grow some weed. Now it's legal, but even before a lot of reasonable people didn't want someone go to jail over weed.

Sure, but do you consider this specific case a real crime?

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#116

Earlier quoted context omitted.

It probably depends on what people think about the laws that define what a "real crime" is. E.g. in germany it was a real crime to grow some weed. Now it's legal, but even before a lot of reasonable people didn't want someone go to jail over weed.

Sure, but do you consider this specific case a real crime?

[flagged]

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#117
post #108

Earlier quoted context omitted.

This has nothing to do with russia. All over the world it's an obvious choice to use it for money laundering.

Yevgeny Prigozhin was well known for his restaurants and catering businesses.

And you don't understand simple logic.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#118
post #89

Some of the comments here (and lately on HN in general) are very concerning to me. Are we really going to pretend that people accused of real crimes shouldn’t be arrested, charged and, if found guilty, have an appropriate sentence? It doesn’t take many more than 2 brain cells rubbing together to see that that won’t end well. Whataboutism, political differences, and even real injustices in my opinion do not make this…

It probably depends on what people think about the laws that define what a "real crime" is. E.g. in germany it was a real crime to grow some weed. Now it's legal, but even before a lot of reasonable people didn't want someone go to jail over weed.

No, it doesn't, at least not to me. I can disagree with a law while also agreeing to obey it and that those who break it should have consequences. I can hold these two opposing ideas because that is the basis by which governments function. If everybody gets to decide for themselves what should be/not be a crime, then we don't have a society. Society is about compromise. What I'm seeing is not compromise. What I'm seeing is people dismissing the whole of law because there's one they don't agree with, or an application or even abuse of the law that offends them. It's an abandonment of balance and a dismissing of rational conversation.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#119

Earlier quoted context omitted.

Sure, but do you consider this specific case a real crime?

[flagged]

Wrong. "No people I agree with were harmed," perhaps. This is no different than cronyism.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#120
post #99
post #85

Earlier quoted context omitted.

I'm not deep into the topic, but AFAIK there generally isn't a warm connection between the CCC and the BND in Germany (in the recent years mostly due to the BNDs involvement ins spying on German citizens, but I think there is also deeper history there). If a hacker collaborates with the BND they do run a risk of many of their peers not wanting to collaborate with them anymore.

It also has something to do with the so called "Hackerparagraph" [1] under which whitehat hacking is basically impossible in Germany. Even writing a program that could potentially be used for hacking is a crime. If you followed the law word for word the authors of e.g. curl could be charged under this law. 1: https://de.wikipedia.org/wiki/Vorbereiten_des_Aussp%C3%A4hen... [de]

It'll nevee cease to amaze me how some countries find such creative ways to stifle innovation while they look to be caring about safety or what not.
Post reply on HN