Aleksei Valerevich Kovalskii Updated Jun 2026
The group is known for being highly organized, project-oriented, and, at times, consisting of more than 100 members. Active Investigations
As of May 2026, the BKA and its international partners are actively seeking information on Kovalskii’s current whereabouts, which are believed to be within the Russian Federation. The investigation is now focusing on:
If you have any information, you can find the BKA's contact form here. If you are interested, I can also: on the Trickbot malware group aleksei valerevich kovalskii updated
This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later. ALEKSEI VALEREVICH KOVALSKII - OpenSanctions
Unconfirmed; he is believed to be sheltered within the borders of the Russian Federation. The Trickbot and "Wizard Spider" Connection The group is known for being highly organized,
: The Trickbot Group (also operating under the umbrella moniker "Wizard Spider") The Trickbot Connections and Charges
Because he resides within the Russian Federation, executing physical arrest warrants remains highly complex due to geopolitical roadblocks. However, the OpenSanctions Registry monitors his profile closely. The publication of his real-name identity, date of birth, and known facial records effectively limits his mobility. It cuts off his ability to travel to any country maintaining an active extradition treaty with Western nations or Interpol members. Key Co-Conspirators Under Watch If you are interested, I can also: on
user wants a long article for the keyword "aleksei valerevich kovalskii updated". This appears to be a Russian name. I need to search for information about this person. I'll search in English and Russian. search results for "aleksei valerevich kovalskii updated" show OpenSanctions entries, possibly a wanted person. The Russian searches show a business person (director/founder of LLCs). There's also a news article about a "Lyubov na dne butylki" from May 19, 2026, but that seems to involve "Alexey Kozelsky", not Kovalsky. There's also a mention of a "Dmitry Kovalsky". I need to gather more information. I'll open the OpenSanctions results and the Russian business profile. OpenSanctions data shows that Aleksei Valerevich Kovalskii is a person of interest, wanted by INTERPOL (Red Notice), born in Krasnoyarsk in 1991. The Russian business profile shows a person with the same name who was a director and founder of several LLCs in Novosibirsk, established in 2012, now liquidated. There might be other news articles or social media profiles. I need to search for news articles. search results show that Aleksei Valerevich Kovalskii is wanted by INTERPOL for alleged membership in the "Trickbot" group (also known as "Wizard Spider"). The OpenSanctions data includes a note in German. I should open that result. I also found a Russian business profile for a person with the same name. I need to verify if these are the same person. There might also be social media profiles. I'll search for "Alexey Kovalsky" or "Aleksei Kovalskii". search results show a LinkedIn profile for an Alexey Kovalsky who is a VFX artist, which is likely a different person. There's also a mention of a "Joy Sharing" app. The OpenSanctions data is the most relevant. I should also search for news about the Trickbot group. Wikipedia page for Wizard Spider might mention a "Kovalev". I'll open it.'ll search within the page for "Kovalev". Wikipedia page mentions "Vitaliy Kovalev", not "Aleksei Kovalskii". However, the OpenSanctions data for Aleksei Valerevich Kovalskii includes a note in German: "Der Beschuldigte steht im Verdacht, Mitglied der „Trickbot“-Gruppierung ... zu sein." This suggests he is suspected of being a member of Trickbot. I should open the "Raw data: KOVALSKII, Aleksei Valerevich" result to see the full note. note is not displayed in the raw data view. I need to view the page source or find a different representation. Maybe the note is in the "Person:notes" field. I can try to search for "notes" within the page.'ll try to view the page as HTML. The OpenSanctions page might have a "notes" section if I view the full entity page. I already opened the entity page (cursor 5). That page might contain the note. I'll scroll further. page only shows 40 lines. Maybe the note is truncated. I can try to use the "view_source" option. HTML source is messy. But I can see that the data comes from an INTERPOL Red Notice. The note might be in the JSON data. However, the search result snippet already gave the note: "Der Beschuldigte steht im Verdacht, Mitglied der „Trickbot“-Gruppierung, auch bekannt als „Wizard Spider“, zu sein." This is likely from the "Person:notes" field. So, Aleksei Valerevich Kovalskii is suspected of being a member of the Trickbot/Wizard Spider cybercrime group.
The criminal enterprise behind Trickbot is known as (also referred to as DEV-0193, UNC2053, or Periwinkle Tempest) . Investigations have revealed that Wizard Spider is a sophisticated and organized Russia-based cybercrime cartel, believed to number about 80 members operating from St. Petersburg and other locations . Their attacks have had real-world consequences, including the infection of medical facilities during the COVID-19 pandemic, which required court orders to remediate .
Analyze how restrict cybercriminal networks.
The group prioritized high-value targets, intentionally striking hospitals, public services, utilities, and municipal governments. Global Devastation and Financial Impact
