Ransomware kingpin “Stern” apparently IDed by German law enforcement

image via Ars Technica

May 31, 2025, 1:32 PM

• •The BKA and local prosecutors have identified Vitaly Nikolaevich Kovalev as “Stern,” the leader of the Trickbot cybercrime group.
• •Kovalev, a 36-year-old Russian man, is believed to be in his home country and shielded from extradition.
• •Stern led Trickbot in a hacking spree targeting thousands of victims, stealing hundreds of millions of dollars.
• •The announcement marks the first time officials have publicly alleged an identity for Stern, who has been sanctioned by the US and UK for alleged involvement with Trickbot.
• •Researchers have speculated about Stern's connections to Russian intelligence and his role in Trickbot's operational security.

German authorities have identified Vitaly Nikolaevich Kovalev as the leader of the notorious Trickbot cybercrime group, known by the online moniker “Stern.” Kovalev, a Russian national, is believed to be in Russia, shielding him from potential extradition. The Trickbot group, under Stern’s direction, orchestrated a massive hacking campaign that stole hundreds of millions of dollars. This identification by the BKA marks a significant breakthrough in understanding one of the most prolific transnational cybercriminal groups.

Read original article