The Federal Criminal Police Office of Germany (Bundescriminalum or BKA) claims that Trickbott and Conti Cybercrime Gangs leader Sterurn, a 36 -year -old Russian, is named Vitali Nikolevich Kokarv.
“The subject is suspected to be the founder of the ‘Trickbott’ group, also known as ‘Wizard Spider’,” BKA Said Last week (English PDF), After another round of seizures and part of Operation Andge, a joint global law enforcement action to target the malware infrastructure and the danger actors behind it.
“The group used tricbott malware as well as other malware variants such as bajraloader, System BC, Ickdid, Rruk, Conty and Divol.”
According to the recently released, Kovalv now wants to do in Germany too. Interpol red notice Saying that he was accused of being an anonymous criminal organization’s ringolder.
However, this is not the first time law enforcement has targeted Kovalv to join a cyber criminal organization. In February 2023, he was one of the seven Russians and was approved. Was accused For links to Trickbott and Conti Cybercrime gang in the United States.
Still, it was only Marked At that time, the surname “Bentley,” “Bergon,” “Alex Conor,” and “Ben” within the Tricbot Group.
The restrictions were leaked from Trickbott and Conti members after a large -scale trove of personal information and internal interactions, which was said to be called Chakrata And contilks.
While Contilks provided access to the gang’s internal conversations and source code, the tricliex moved one step ahead, leaked the personal information of the trickbot members on the identity, online accounts and Twitter.
These conversations highlighted that Kovalv, under the surname “Stern”, were in charge of Tricbot Operation and Ryuk and Conti Rainsmware Gangs. Chat explained how other members would contact stern for approval for trickbott members arrested in the United States or before applying lawyers.
Leaks eventually accelerated the shutdown of the contem, with the members of the contest crime to go to other operations or start new gangs including Royal, Black Basta, Blackcat, Avosalcker, Karakart, Lockbit, Silent, Silent Rancem, Dagokar and Zone.
BKA said last Friday, “According to the investigation by BKA, many times, the tricbott group consisted of over 100 members. It works in an organized and hierarchical manner and is the project and profit-oriented.”
“The group is responsible for the infection of Germany and the world around the world; through its illegal activities it has obtained funds in a three -digit range. Its victims include hospitals, public facilities, companies, public authority and private individuals.”
While the current hideouts of Kokarv are unknown, the German police believe that he currently lives in Russia and has asked for any information that can be taken into possession, including his current online account or which communication channels.
Based on the analysis of 14M malicious tasks, search for the top 10 MITERAT & CK techniques behind the 93% attacks and how to defend them against them.
