Blog

  • Guilt by Solidarity

    After Charlie Kirk’s assassination, the Trump administration declared a war on the left. The White House hosted a theatrical day-long press conference on the threat that antifa poses and issued new law enforcement guidance that instructed the FBI to closely monitor groups that oppose borders, capitalism, and traditional family values. While this fearmongering rhetoric has long invited mockery…

    Source

  • Pluralistic: Your boss wants to use surveillance data to cut your wages (06 Apr 2026)

    Today’s links



    A robot in an old fashioned frock coat. In one hand, he holds a giant magnifying glass. On the other stands a child laborer - a coal miner from the 1910s, squinting at the camera. Terrifying energy beams streak out of the robot's eyes into the glass and at the child. The background is an extremely dark, very roughed-up US $100 bill.

    Your boss wants to use surveillance data to cut your wages (permalink)

    What industry calls “personalized pricing” is really surveillance pricing: using digital tools’ flexibility to change the price for each user, and using surveillance data to guess the worst price you’ll accept:

    https://pluralistic.net/2025/06/24/price-discrimination/

    At root, surveillance pricing allows companies to revalue both your savings and your labor. If you get charged $2 for something I only pay $1 for, the seller is essentially reaching into your bank account and revaluing the dollars in it at 50 cents apiece. If you get paid $1 for a job that I make $2 for, then the boss is valuing your labor at 50% of my labor:

    https://pluralistic.net/2025/06/24/price-discrimination/#

    Surveillance pricing is a key part of enshittification, relying on three of the key enshittificatory factors that have transformed this era into the enshittocene:

    I. Monopoly: Surveillance pricing is undesirable to both workers and buyers, so in a competitive market, surveillance pricing would drive labor and consumption to non-surveilling rivals:

    https://pluralistic.net/2022/02/20/we-should-not-endure-a-king/

    II. Regulatory capture: Surveillance pricing only exists because of weak regulation and weak enforcement of existing regulations. To engage in surveillance pricing, a company must first put you under surveillance, something that is only possible in the absence of effective privacy law.

    In the USA, privacy law hasn’t been updated since Congress passed a law in 1988 that banned video-store clerks from disclosing your VHS rentals:

    https://pluralistic.net/2025/10/31/losing-the-crypto-wars/#surveillance-monopolism

    In the EU, the strong privacy provisions in the GDPR have been neutralized by US tech giants who fly an Irish flag of convenience. Ireland attracts these companies by allowing them to evade their taxes, but it can only keep these companies by allowing them to break any law that gets in their way, because if Meta can pretend to be Irish this week, it could pretend to be Maltese (or Cypriot, Luxembourgeois, or Dutch) next week:

    https://pluralistic.net/2023/05/15/finnegans-snooze/#dirty-old-town

    What’s more, competition laws in the EU and the USA ban surveillance pricing, but a half-century of lax competition law enforcement has allowed companies to routinely engage in the “unfair and deceptive methods of competition” banned in both territories.

    III. Twiddling: “Twiddling” is my word for the way that digitized businesses can use computers’ flexibility to alter their prices, offers, and other fundamentals on a per-user, per-session basis. It’s not enough to spy on users: to engage in surveillance pricing, you have to be able to mobilize that surveillance data from instant to instant, changing the prices for every user. This can only be done once a business has been digitized:

    https://pluralistic.net/2023/02/19/twiddler/

    Combine monopoly, weak privacy law, weak competition law, and digitization, and you don’t just make surveillance pricing possible – at that point, it’s practically inevitable. This is what it means to create an enshittogenic policy environment: by arranging policy so that the most awful schemes of the worst people are the most profitable, you guarantee that those people will end up organizing commercial and labor markets.

    When surveillance pricing is applied to labor, we call it “algorithmic wage discrimination,” a term coined by Veena Dubal based on her research with Uber drivers:

    https://pluralistic.net/2023/04/12/algorithmic-wage-discrimination/#fishers-of-men

    Uber uses historic data on drivers to make inferences about how economically precarious they are, and then extracts a “desperation premium” from their wages. Drivers who are pickier about which rides they accept (“pickers”) are offered higher wages than drivers who take any ride (“ants”):

    https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4331080

    On the back-end, Uber is inferring that the reason an ant will accept a worse job is that they have fewer choices – they are more strapped for cash and/or have fewer options for earning a higher wage.

    This is a straightforward form of algorithmic wage discrimination, using the blunt signal of how discriminating a driver is when signing onto a job to titer the subsequent wage offered to that driver. More sophisticated forms of algorithmic wage discrimination draw on external sources of data to set the price of your labor.

    That’s the situation for contract nurses, whose traditional brick-and-mortar staffing agencies have been replaced by nationwide apps that market themselves as “Uber for nursing.” These apps use commercial surveillance data from the unregulated data-broker sector to check on how much credit card debt a nurse is carrying and whether that debt is delinquent to set a wage: the more debt you have and the more dire your indebtedness is, the lower the wage you are offered (and therefore the more debt you accumulate – lather, rinse, repeat):

    https://pluralistic.net/2024/12/18/loose-flapping-ends/#luigi-has-a-point

    Surveillance wages are now proliferating to other parts of the economy, as “consultancies” offer software to employers that let them set all parts of your compensation – base wage, annual raises, and bonuses – based on your perceived desperation, as derived from commercial surveillance data that has been collected about you:

    https://www.marketwatch.com/story/employers-are-using-your-personal-data-to-figure-out-the-lowest-salary-youll-accept-c2b968fb

    Genna Contino’s Marketwatch article on the phenomenon offers a concise definition of “surveillance wages”:

    a system in which wages are based not on an employee’s performance or seniority, but on formulas that use their personal data, often collected without employees’ knowledge.

    This means that carrying a credit-card balance, taking out a payday loan, or even discussing your indebtedness on social media can all lead to lower wages in the future. Contino references a recent report released by Dubal and tech strategist Wilneida Negrón, surveying 500 large firms, which concluded that surveillance wages are now being offered in sectors as diverse as “healthcare, customer service, logistics and retail.” Customers for surveillance wage tools include “Intuit, Salesforce, Colgate-Palmolive, Amwell and Healthcare Services Group”:

    https://equitablegrowth.org/how-artificial-intelligence-uncouples-hard-work-from-fair-wages-through-surveillance-pay-practices-and-how-to-fix-it/

    After a brief crackdown under Biden, the Trump regime has been extraordinarily welcoming to surveillance pricing companies, dropping investigations and cases against firms that engaged in the practice. A few states are stepping in to fill the gap, with New York state passing a rule requiring disclosure of surveillance pricing – a modest step that was nevertheless fought tooth-and-nail by the state’s businesses.

    In Colorado, a new House bill called the “Prohibit Surveillance Data to Set Prices and Wages Act” would prohibit the use of personal information in wage-setting:

    https://leg.colorado.gov/bills/hb25-1264

    This bill hasn’t passed yet, but it’s already doing useful work. Companies universally deny using surveillance data to set wages, insisting that they merely pay for consulting services that give them advice on how they could do surveillance wages – but don’t actually take that advice. However, these same companies – including Uber and Lyft – are ferociously lobbying against the bill, raising an obvious question, articulated by the bill’s co-sponsor Rep Javier Mabrey (D-1): if these companies don’t pay surveillance wages, then “what is the problem of codifying in law that you’re not allowed to?”

    Surveillance wages are a rare profitable use-case for AI, in part because surveillance wages don’t need to be “correct” in order to be effective. An employee who is offered a wage that’s slightly higher than the lowest sum they’d accept still represents a savings to the company’s wage-bill. As ever, AI is great for fully automating tasks if you don’t care whether they’re done well:

    https://pluralistic.net/2026/03/22/nobodys-home/#squeeze-that-hog

    The fact that surveillance wages are calculated by external contractors enables employers to engage in otherwise illegal price-fixing. If all the garages in town set mechanics’ wages using the same surveillance pricing tool, then a mechanic looking for a job will get the same lowball offer from all nearby employers. If those bosses were to gather around a table and fix the wage for any (or all) mechanics, that would be wildly illegal, but the fact that this is done via a software package lets the bosses claim they’re not actually colluding.

    This is a common practice in other forms of price-fixing. We see it in meat, potato products, and, of course, rental accommodations (hey there, Realpage!). It’s a genuinely stupid ruse based on the absurd idea that “it’s not a crime if we do it with an app”:

    https://pluralistic.net/2025/01/25/potatotrac/#carbo-loading

    Speaking of crimes that are implausibly deniable when undertaken with an app: surveillance wages also allow employers to offer lower wages to women and brown and Black people while maintaining the pretense that they’re in compliance with laws banning gender and racial discrimination.

    In the wider economy, women and racialized people are already offered lower wages and – thanks to the legacy of racial discrimination in employment and housing – are more likely to be indebted:

    https://pluralistic.net/2021/06/06/the-rents-too-damned-high/

    By tapping into data brokers’ dossiers that reveal the economic precarity of jobseekers, surveillance pricing allows employers to systematically lower the wages of women and Black and brown people, who have the highest incidence of indebtedness, while still claiming to offer race- and gender-blind wages. This is a phenomenon that Patrick Ball calls “empiricism washing”: first, move the illegal racist discrimination into an algorithm, then insist that “numbers can’t be racist.”

    But this isn’t just about lowering wages at the bottom of the employment market. In recent history, the employers most eager to illegally lower their workers’ wages are tech bosses, who had to pay massive fines for illegally colluding on “no poach” agreements to suppress the earning power of high-paid computer programmers:

    https://en.wikipedia.org/wiki/High-Tech_Employee_Antitrust_Litigation

    (This is why the tech industry is so horny for AI – tech bosses can’t wait to fire a ton of programmers and use the resulting terror to force down the wages of the remaining tech workers:)

    https://pluralistic.net/2026/01/05/fisher-price-steering-wheel/#billionaire-solipsism

    Which means that the very programmers who write and maintain the surveillance wage software used on the rest of us are especially likely to have the tools they created turned on them.


    Hey look at this (permalink)



    A shelf of leatherbound history books with a gilt-stamped series title, 'The World's Famous Events.'

    Object permanence (permalink)

    #20yrsago Arthur C Clarke fights Buddhist monks over Daylight Savings Time http://news.bbc.co.uk/1/hi/world/south_asia/4865972.stm

    #20yrsago What parts of the .COM space are registered? https://web.archive.org/web/20060411133458/https://www.yafla.com/dforbes/2006/03/29.html

    #20yrsago Bomb squad called out to “defuse” life-size Super Mario power-ups https://web.archive.org/web/20060405034455/http://www.recordpub.com/article.php?pathToFile=archive/04012006/news/&file=_news1.txt&article=1&tD=04012006

    #20yrsago Poems showing the absurdities of English spelling https://web.archive.org/web/20060405223008/https://www.spellingsociety.org/news/media/poems.php

    #20yrsago Isaac Newton’s alchemical “chymistry” notebook scans https://web.archive.org/web/20060612203137/http://webapp1.dlib.indiana.edu/newton/index.jsp

    #20yrsago Poems showing the absurdities of English spelling https://web.archive.org/web/20060405223008/https://www.spellingsociety.org/news/media/poems.php

    #20yrsago Isaac Newton’s alchemical “chymistry” notebook scans https://web.archive.org/web/20060612203137/http://webapp1.dlib.indiana.edu/newton/index.jsp

    #15yrsago Misleading government stats and the innumerate media who repeat them https://www.badscience.net/2011/04/anarchy-for-the-uk-ish/

    #15yrsago US Customs’ domain-seizure program blocks free speech, leaves alleged pirates largely unscathed https://torrentfreak.com/us-governments-pirate-domain-seizures-failed-miserably-110403/

    #15yrsago Misleading government stats and the innumerate media who repeat them https://www.badscience.net/2011/04/anarchy-for-the-uk-ish/

    #15yrsago US Customs’ domain-seizure program blocks free speech, leaves alleged pirates largely unscathed https://torrentfreak.com/us-governments-pirate-domain-seizures-failed-miserably-110403/

    #10yrsago Panama Papers: Largest leak in history reveals political and business elite hiding trillions in offshore havens https://www.theguardian.com/news/2016/apr/03/the-panama-papers-how-the-worlds-rich-and-famous-hide-their-money-offshore

    #10yrsago America’s teachers are being trained in a harsh interrogation technique that produces false confessions https://web.archive.org/web/20160404143447/https://www.alternet.org/education/why-are-k-12-school-leaders-being-trained-coercive-interrogation-techniques

    #10yrsago LA’s new rule: homeless people are only allowed to own one trashcan’s worth of things https://www.latimes.com/local/california/la-me-apartments-demolished-20160402-story.html
    #10yrsago Save Netflix! https://www.eff.org/deeplinks/2016/04/save-netflix

    #10yrsago The TSA spent $1.4M on an app to tell it who gets a random search https://kevin.burke.dev/kevin/tsa-randomizer-app-cost-336000/

    #10yrsago Iceland’s Prime Minister says he won’t resign, mass demonstrations gain momentum https://icelandmonitor.mbl.is/news/politics_and_society/2016/03/31/anti_government_demo_planned_for_monday/

    #10yrsago Panama Papers reveal the tax-avoidance strategies of David Cameron’s father https://www.theguardian.com/news/2016/apr/04/panama-papers-david-cameron-father-tax-bahamas

    #10yrsago Studio sculpts giant coin, photographs it alongside normal objects to make them look tiny https://skrekkogle.com/projects/50c/

    #5yrsago China’s antitrust surge https://pluralistic.net/2021/04/03/ambulatory-wallets/#sectoral-balances

    #5yrsago Consumerism won’t defeat Georgia’s Jim Crow https://pluralistic.net/2021/04/03/ambulatory-wallets/#christmas-voting-turkeys

    #1yrago End-stage capitalism https://pluralistic.net/2025/04/04/anything-that-cant-go-on/#forever-eventually-stops


    Upcoming appearances (permalink)

    A photo of me onstage, giving a speech, pounding the podium.



    A screenshot of me at my desk, doing a livecast.

    Recent appearances (permalink)



    A grid of my books with Will Stahle covers..

    Latest books (permalink)



    A cardboard book box with the Macmillan logo.

    Upcoming books (permalink)

    • “The Reverse-Centaur’s Guide to AI,” a short book about being a better AI critic, Farrar, Straus and Giroux, June 2026 (https://us.macmillan.com/books/9780374621568/thereversecentaursguidetolifeafterai/)
    • “Enshittification, Why Everything Suddenly Got Worse and What to Do About It” (the graphic novel), Firstsecond, 2026

    • “The Post-American Internet,” a geopolitical sequel of sorts to Enshittification, Farrar, Straus and Giroux, 2027

    • “Unauthorized Bread”: a middle-grades graphic novel adapted from my novella about refugees, toasters and DRM, FirstSecond, 2027

    • “The Memex Method,” Farrar, Straus, Giroux, 2027



    Colophon (permalink)

    Today’s top sources:

    Currently writing: “The Post-American Internet,” a sequel to “Enshittification,” about the better world the rest of us get to have now that Trump has torched America. First draft complete. Second draft underway.

    • “The Reverse Centaur’s Guide to AI,” a short book for Farrar, Straus and Giroux about being an effective AI critic. LEGAL REVIEW AND COPYEDIT COMPLETE.
    • “The Post-American Internet,” a short book about internet policy in the age of Trumpism. PLANNING.

    • A Little Brother short story about DIY insulin PLANNING


    This work – excluding any serialized fiction – is licensed under a Creative Commons Attribution 4.0 license. That means you can use it any way you like, including commercially, provided that you attribute it to me, Cory Doctorow, and include a link to pluralistic.net.

    https://creativecommons.org/licenses/by/4.0/

    Quotations and images are not included in this license; they are included either under a limitation or exception to copyright, or on the basis of a separate license. Please exercise caution.


    How to get Pluralistic:

    Blog (no ads, tracking, or data-collection):

    Pluralistic.net

    Newsletter (no ads, tracking, or data-collection):

    https://pluralistic.net/plura-list

    Mastodon (no ads, tracking, or data-collection):

    https://mamot.fr/@pluralistic

    Bluesky (no ads, possible tracking and data-collection):

    https://bsky.app/profile/doctorow.pluralistic.net

    Medium (no ads, paywalled):

    https://doctorow.medium.com/

    Tumblr (mass-scale, unrestricted, third-party surveillance and advertising):

    https://mostlysignssomeportents.tumblr.com/tagged/pluralistic

    When life gives you SARS, you make sarsaparilla” -Joey “Accordion Guy” DeVilla

    READ CAREFULLY: By reading this, you agree, on behalf of your employer, to release me from all obligations and waivers arising from any and all NON-NEGOTIATED agreements, licenses, terms-of-service, shrinkwrap, clickwrap, browsewrap, confidentiality, non-disclosure, non-compete and acceptable use policies (“BOGUS AGREEMENTS”) that I have entered into with your employer, its partners, licensors, agents and assigns, in perpetuity, without prejudice to my ongoing rights and privileges. You further represent that you have the authority to release me from any BOGUS AGREEMENTS on behalf of your employer.

    ISSN: 3066-764X

  • Antivax tech bro Steve Kirsch uses AI to rediscover the Jock Doubleday challenge

    Everything old is new again, even when AI is involved, as a very old antivax trope is rediscovered for a new generation.

    The post Antivax tech bro Steve Kirsch uses AI to rediscover the Jock Doubleday challenge first appeared on Science-Based Medicine.

  • I Fought, Tooth and Nail

    I Fought, Tooth and Nail

    1986 saw me withdraw at home from massive amounts of prescribed benzodiazepines, namely Ativan (lorazepam).  The need to withdraw had come about after I had a10 year iatrogenic dependence, and although it came to an end, I was left bed bound, house bound and I lost 50% of my body weight. I was very seriously ill. I was left with a complete 10 year memory loss, from aged 32 to 42.

    Fast forward into the future.

    I have spent my time and energies campaigning on the issue of iatrogenic harm from prescribed benzodiazepines. I have given evidence in the House of Commons, and I gave a speech on benzodiazepines to the same House. I travelled to Brussels, to the headquarters of the EU to meet with the European Health Minister, appearing on all the major TV Channels. In 2004/5, I was instrumental in setting up a dedicated benzodiazepine drug withdrawal service here in Oldham where I live, for the then estimated 5,200 long term dependent patients, running a national helpline service from home aided by my wife Sue. I was privileged to receive an invitation to attend a meeting at Buckingham Palace accompanied by Sue and I was awarded the 2007 ‘Man of Oldham’ trophy for my voluntary drug awareness campaign and advocacy work. I have attended many national drug conferences and frequently had the opportunity to contribute with my speeches.

    This coming August Sue and myself will celebrate 58 years of marriage.

    This is an extract taken from my speech at Portcullis House, House of Commons July 9 2013 at a Prescribed Drug Seminar.

    In 1976 I had a mental health breakdown at the age of 32, I was holding down two jobs at the time.  Studying for my Accountancy Technicians Exams, which I passed with Distinction and being a Dad to my two daughters aged seven and six.  I was then prescribed Librium and Valium for 5 years.  In 1981 my doctors in their wisdom prescribed me 10 mgs of Ativan daily, increased to 20 mgs, then to 30 mgs daily. So by 1985, I was being prescribed 30 mgs of Ativan.  Which equates to 300 mgs of Diazepam AND 12 x 30 mgs daily of Dihydrocodeine tablets for the severe headaches, caused by the Ativan.  All GP prescribed.  No misuse by me but misuse of me by my then doctors.

    “By now the drugs had had turned me very violent and aggressive. Looking for fights.

    “I am a mild-mannered former Accountant but these drugs turned me into a monster.   The turning point came in late 1985 when I almost hit my wife Sue, whom I love dearly. In that short lucid moment, I realised that it was the drugs causing my abnormal behaviour. I knew then that I had to get off them, or die, or lose my wife and my family.  So I withdrew myself at home over a 14 month period, with no help from my doctors.  They ran away from the very problem they had created.

    “I became drug free on the 19th of March 1986.

    “By this time by weight had dropped from 14 and a half stone down to 7 stone.  I would not put a single person through the hell that I went through to withdraw from these highly dependence forming drugs.   When I finally (awoke) out of my 10 year drug induced coma, my then two small daughters were all grown up.  I have no memories at all, my memory bank has been wiped clean from 32 to 42 years of age……….   1976 to 1986 is a total void in my life.”

    All the points I made which referred to the events in my life from 1976 to1986 were confirmed by my wife Sue and my later inspection of my medical records.  For several years after my withdrawal, I had so much pent-up anger at the doctors responsible, but I realised I had to let go of this injustice or it would destroy me.  So that’s what I did. Instead, I re-directed my emotional energy as I started to research the issues involved, actively campaigned to help others and I have continued to do so ever since.

    In 2017 I received an email from Dr Ian Wilkinson:

    Just to let you know Barry, that i will no longer be the Chief Clinical officer of Oldham CCG.  Thank you for your ongoing support of CCG and PCT previously.

    You have championed the cause of prescribed drug dependency locally, nationally and internationally more than anyone and it was always with pride that we had someone like yourself as a champion from Oldham.

    The cause will get the recognition and success it deserves.

    The Oldham set up was described as an example of ‘good practice’ by the BMA.  Government could quite easily have duplicated the Oldham set up throughout the country but chose not to.  It is cost effective and an efficient use of resources and it ran until 2018 by Addiction Dependency Solutions (ADS ) Manchester.  Indeed, it was further extended to treat those patients who had problems with z drugs, painkillers and antidepressants.

    Government could find huge monies to fund illegal drug addicts but not patients caught in the web of iatrogenic drug dependency.   The latter is on a much greater scale than the former and would seriously have embarrassed Government, the Medical Profession and of course Pharma super profits from prescribed drugs.  This medical disaster could have been averted but the lid was sealed tight in order to protect the guilty parties and the REAL TRUTH on the dangers of benzodiazepines to the patients.  The nub of the issue,  Government will fund dedicated national services for illegal drug addicts but not for legal drug addiction ( iatrogenic ) dependency.

    Ray Nimmo’s  benzo site on benzo.org.uk has a comprehensive archive section on my interviews with the Oldham Evening Chronicle going back years.

    I have presented evidence to 3 different Health Enquiries, (although benzos were only small part of this). In 2017 after a Benzo meeting in Oldham I asked both Debbie Abrahams MP and Andy Burnham, Mayor of Manchester if they would support me to seek a Government Enquiry into Benzodiazepines.  Both said NO in unison.

    Hillsborough and the Post Office received an Enquiry but we, the victims and our families could not seek the public truth.

    After 2017, because of my worsening general health and my permanent brain damage including the fact that the daily chronic migraines were intensifying, I have had to pull back a lot from campaigning.  Plus, I will be 83 years young later this summer.

    Nevertheless, despite my age and my infirmities I continue to help and assist people on FB as much as I can, all on a voluntary basis and as a labour of love. Currently I am helping folk from the USA, Japan, Germany, Ireland and England.  My wife also continues to pitch in to help others.

    We are the HAZZIES and make a good Team.

    It is clear that our government and the DoH had no intention of tackling the benzo crisis and have swept the issue under the carpet.   They have deliberately associated illegal drug misuse with iatrogenic drug dependence to muddy the waters and put the ‘blame’ on patients.

    Total cowardice.

    The next huge medical prescribed drug disaster is already with us in the form of the SSRI’s. That is another story for another day.

    Benzodiazepines are neuro toxic prescribed drugs and have ruined, not only my life but my family’s life too but I fought back from hell, with ‘tooth and nail’ and continue to fight for government to provide proper recognition of this medical disaster, for change in both the prescribing habits of doctors and for action to put right iatrogenic harm.

    ****

    Mad in the UK hosts blogs by a diverse group of writers. The opinions expressed are the writers’ own.

    The post I Fought, Tooth and Nail appeared first on Mad in the UK.

  • Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

    Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

    An elusive hacker who went by the handle “UNKN” and ran the early Russian ransomware groups GandCrab and REvil now has a name and a face. Authorities in Germany say 31-year-old Russian Daniil Maksimovich Shchukin headed both cybercrime gangs and helped carry out at least 130 acts of computer sabotage and extortion against victims across the country between 2019 and 2021.

    Shchukin was named as UNKN (a.k.a. UNKNOWN) in an advisory published by the German Federal Criminal Police (the “Bundeskriminalamt” or BKA for short). The BKA said Shchukin and another Russian — 43-year-old Anatoly Sergeevitsch Kravchuk — extorted nearly $2 million euros across two dozen cyberattacks that caused more than 35 million euros in total economic damage.

    Daniil Maksimovich SHCHUKIN, a.k.a. UNKN, and Anatoly Sergeevitsch Karvchuk, alleged leaders of the GandCrab and REvil ransomware groups.

    Germany’s BKA said Shchukin acted as the head of one of the largest worldwide operating ransomware groups GandCrab and REvil, which pioneered the practice of double extortion — charging victims once for a key needed to unlock hacked systems, and a separate payment in exchange for a promise not to publish stolen data.

    Shchukin’s name appeared in a Feb. 2023 filing (PDF) from the U.S. Justice Department seeking the seizure of various cryptocurrency accounts associated with proceeds from the REvil ransomware gang’s activities. The government said the digital wallet tied to Shchukin contained more than $317,000 in ill-gotten cryptocurrency.

    The Gandcrab ransomware affiliate program first surfaced in January 2018, and paid enterprising hackers huge shares of the profits just for hacking into user accounts at major corporations. The Gandcrab team would then try to expand that access, often siphoning vast amounts of sensitive and internal documents in the process. The malware’s curators shipped five major revisions to the GandCrab code, each corresponding with sneaky new features and bug fixes aimed at thwarting the efforts of computer security firms to stymie the spread of the malware.

    On May 31, 2019, the GandCrab team announced the group was shutting down after extorting more than $2 billion from victims. “We are a living proof that you can do evil and get off scot-free,” GandCrab’s farewell address famously quipped. “We have proved that one can make a lifetime of money in one year. We have proved that you can become number one by general admission, not in your own conceit.”

    The REvil ransomware affiliate program materialized around the same as GandCrab’s demise, fronted by a user named UNKNOWN who announced on a Russian cybercrime forum that he’d deposited $1 million in the forum’s escrow to show he meant business. By this time, many cybersecurity experts had concluded REvil was little more than a reorganization of GandCrab.

    UNKNOWN also gave an interview to Dmitry Smilyanets, a former malicious hacker hired by Recorded Future, wherein UNKNOWN described a rags-to-riches tale unencumbered by ethics and morals.

    “As a child, I scrounged through the trash heaps and smoked cigarette butts,” UNKNOWN told Recorded Future. “I walked 10 km one way to the school. I wore the same clothes for six months. In my youth, in a communal apartment, I didn’t eat for two or even three days. Now I am a millionaire.”

    As described in The Ransomware Hunting Team by Renee Dudley and Daniel Golden, UNKNOWN and REvil reinvested significant earnings into improving their success and mirroring practices of legitimate businesses. The authors wrote:

    “Just as a real-world manufacturer might hire other companies to handle logistics or web design, ransomware developers increasingly outsourced tasks beyond their purview, focusing instead on improving the quality of their ransomware. The higher quality ransomware—which, in many cases, the Hunting Team could not break—resulted in more and higher pay-outs from victims. The monumental payments enabled gangs to reinvest in their enterprises. They hired more specialists, and their success accelerated.”

    “Criminals raced to join the booming ransomware economy. Underworld ancillary service providers sprouted or pivoted from other criminal work to meet developers’ demand for customized support. Partnering with gangs like GandCrab, ‘cryptor’ providers ensured ransomware could not be detected by standard anti-malware scanners. ‘Initial access brokerages’ specialized in stealing credentials and finding vulnerabilities in target networks, selling that access to ransomware operators and affiliates. Bitcoin “tumblers” offered discounts to gangs that used them as a preferred vendor for laundering ransom payments. Some contractors were open to working with any gang, while others entered exclusive partnerships.”

    REvil would evolve into a feared “big-game-hunting” machine capable of extracting hefty extortion payments from victims, largely going after organizations with more than $100 million in annual revenues and fat new cyber insurance policies that were known to pay out.

    Over the July 4, 2021 weekend in the United States, REvil hacked into and extorted Kaseya, a company that handled IT operations for more than 1,500 businesses, nonprofits and government agencies. The FBI would later announce they’d infiltrated the ransomware group’s servers prior to the Kaseya hack but couldn’t tip their hand at the time. REvil never recovered from that core compromise, or from the FBI’s release of a free decryption key for REvil victims who couldn’t or didn’t pay.

    Shchukin is from Krasnodar, Russia and is thought to reside there, the BKA said.

    “Based on the investigations so far, it is assumed that the wanted person is abroad, presumably in Russia,” the BKA advised. “Travel behaviour cannot be ruled out.”

    There is little that connects Shchukin to UNKNOWN’s various accounts on the Russian crime forums. But a review of the Russian crime forums indexed by the cyber intelligence firm Intel 471 shows there is plenty connecting Shchukin to a hacker identity called “Ger0in” who operated large botnets and sold “installs” — allowing other cybercriminals to rapidly deploy malware of their choice to thousands of PCs in one go. However, Ger0in was only active between 2010 and 2011, well before UNKNOWN’s appearance as the REvil front man.

    A review of the mugshots released by the BKA at the image comparison site Pimeyes found a match on this birthday celebration from 2023, which features a young man named Daniel wearing the same fancy watch as in the BKA photos.

    Images from Daniil Shchukin’s birthday party celebration in Krasnodar in 2023.

  • NHS urges public not to delay seeking medical help, ahead of ‘difficult’ strike

    The NHS is urging patients across England not to put off coming forward for the care they need during this week’s resident doctor strikes. Industrial action begins at 7am on Tuesday 7 April and runs for six days until 6:59am on Monday 13 April, with hospital teams across the country working to minimise disruption for patients. In addition to prioritising urgent […]
  • ‘Two weeks will make such a difference’: UK first as NI brings in miscarriage leave

    Northern Ireland becomes first part of UK to bring in legal entitlement for parents affected by miscarriage at any stage of a pregnancy to have paid leave.
  • U.S. Lawmakers Work on Unified Site-Blocking Bill to Counter Online Piracy

    U.S. Lawmakers Work on Unified Site-Blocking Bill to Counter Online Piracy

    The Supreme Court’s decision to reverse the billion-dollar piracy liability verdict against Cox Communications is a major win for Internet service providers.

    It confirms that they can’t be held liable for pirating activities of subscribers or customers unless they actively induce copyright infringement through specific acts, or if their service has no substantial non-infringing uses.

    For rightsholders, however, the ruling represents a significant setback, as it makes it much harder to hold ISPs liable for pirating subscribers.

    Or, as Justice Sotomayor noted in her concurring Supreme Court opinion, the majority’s decision “permits ISPs to sell an internet connection to every single infringer who wants one without fear of liability and without lifting a finger to prevent infringement.”

    The ruling reshapes the liability landscape, giving new urgency to site-blocking efforts.

    Internet providers have previously opposed such legislation over liability concerns. Have those concerns been resolved by the Supreme Court? And where do the U.S. site-blocking legislative efforts stand today?

    A Bicameral, Bipartisan Site Blocking Push

    Last year, several new site-blocking proposals emerged in Congress. In January 2025, Lofgren had filed her Foreign Anti-Digital Piracy Act (FADPA) in the House. A few months later, Senator Tillis announced a draft of the Block BEARD Act, with bipartisan support from Senators Chris Coons, Marsha Blackburn, and Adam Schiff.

    At the time, the House and Senate efforts were not coordinated. That has changed.

    TorrentFreak has learned that, over the past months, Senator Tillis and Representative Lofgren have been working on a draft that would combine their separate site-blocking proposals into a single piece of legislation.

    The unified approach marks a significant shift from the fragmented approach of the past year.

    No draft text has been circulated publicly, and sources could not provide a specific timeline for introduction beyond noting it would need to happen before Tillis’s term ends in January 2027.

    One possibility mentioned by sources is that the legislation could be attached to an omnibus spending bill. For now, however, that remains speculative.

    Targeting ISPs and DNS Resolvers

    While detailed specifics on the bill will have to wait until a draft is circulating, it is expected that the legislation will require both ISPs and large DNS providers to block foreign pirate sites.

    This is in line with Lofgren’s original FADPA bill, which specifically included DNS resolvers with more than $100 million in annual revenue. Tillis’s Block BEARD act does not mention DNS resolvers, but uses the Section 512(k)(1)(A) DMCA service provider definition, which is wide enough to capture them.

    The inclusion of DNS resolvers is significant, as it brings tech companies such as Google and Cloudflare into the mix. Targeting DNS resolvers is relatively novel internationally, as most site-blocking regimes do not explicitly include DNS providers.

    We reached out to Google and Cloudflare, requesting comment, but they did not reply before publication. However, these companies have appealed similar blocking requests elsewhere, including in France, so they likely have reservations.

    Notably, last year the Internet Infrastructure Coalition (I2Coalition), which represents major tech companies including Amazon, Cloudflare, and Google, launched its DNS at Risk campaign, warning the public about such DNS blocking threats.

    Support and Opposition

    Rightsholder groups including the RIAA, MPA, and Creative Future have supported the site-blocking efforts, while consumer advocates have raised concerns. However, the public discourse has been relatively quiet compared to the SOPA debates in 2012.

    Times have changed and site blocking is much more common today than it was back then. That said, discussions, support, and critique will likely pick up when the legislation moves forward.

    It is notable, however, that Representative Lofgren’s leading role is a shift from her position during the SOPA debates. At the time, she was among the fiercest opponents of SOPA in 2012, warning that blocking threatened the open internet.

    Lofgren believes that her FADPA proposal is a “smart, targeted approach” that is mindful of due process, and respects free speech while using a narrow and targeted blocking approach.

    Rep. Issa’s Wild Card

    Running parallel to the Tillis-Lofgren effort is a separate proposal from Representative Darrell Issa, chairman of the House Judiciary Subcommittee on Courts, Intellectual Property, and the Internet.

    Issa’s American Copyright Protection Act (ACPA) has been circulated in draft form for a while but has not been formally introduced. The bill takes a different procedural path. Rather than relying on standard district court jurisdiction, ACPA proposes that the Judicial Conference of the United States maintain a roster of designated judges to hear all piracy blocking cases.

    Whether the Tillis-Lofgren framework and Issa’s separate effort will eventually converge remains unclear. Sources indicate that, in earlier stages, these were two separate, uncoordinated tracks.

    Issa’s proposal also includes DNS resolvers. At the same time, it also addresses overblocking concerns directly. If a third party’s site is blocked due to an error caused by the copyright owner, the third party could request up to $250,000 in compensation from the rightsholder.

    The Timeline

    At the time of writing, the introduction timeline for the bicameral bill is unknown. However, Senator Tillis is not running for reelection. That gives him until January 2027 to advance the legislation and also creates a hard deadline.

    Whether the bill surfaces as standalone legislation, gets attached to an omnibus spending package, or eventually blends with Issa’s separate ACPA proposal has yet to be seen. But it’s clear that, behind the scenes, lawmakers are still working on getting it ready.

    With the Cox decision reshaping the legal landscape, site-blocking efforts have gained new urgency for both ISPs, DNS providers, and rightsholders.

    From: TF, for the latest news on copyright battles, piracy and more.

  • Transit Live Mapping Solutions

    Hi, we are Transit Live Mapping Solutions,
    Enhancing openness and promoting access to Dresden public infrastructure data since 2022.

    a small group of students, currently consisting of Marenz, Tassilo and 0xA, that ended up getting seriously nerdsniped by something that started off as a small side-project during lockdown.

    Our aim is to collect reliable real time information about public transport and make it available to everyone in a straightforward way. We are convinced that open data for commonly shared infrastructure will help contribute to a more efficient and safe state of operation. Check out the map to see what we’ve built so far.