Germany's federal police agency, the BKA, claims to have identified the mysterious Trickbot ransomware kingpin as Vitaly Nikolaevich Kovalev, a 36-year-old Russian man known online as 'Stern.'
Kovalev is wanted by Germany for allegedly being the 'ringleader' of a criminal organization, with the Interpol issuing a red notice for him.
The identification of 'Stern' as Kovalev is a significant development in understanding Trickbot, one of the notorious cybercriminal groups.
Global law enforcement may have strategically withheld Stern's identity as part of ongoing investigations, with information obtained through various investigations aiding in his attribution.
The German announcement marks the first public allegation of an identity for the suspect behind the moniker 'Stern.'
Kovalev, previously sanctioned by the US and UK for his involvement in Trickbot, was linked to online handles 'ben' and 'Bentley.'
Trickbot, a prominent ransomware group, overlapping with Conti gang, has been linked to cybercrimes orchestrated by 'Stern' acted like a CEO running operations like a legitimate company.
Stern's eminence in Russian cybercrime is notable, with reports indicating connections to Russia's intelligence apparatus, indicating professionalism and strong operational security.
The effectiveness of Trickbot and Conti was attributed to Stern's leadership and ability to maintain operational security, as indicated by cybersecurity experts.
The identification of Kovalev as 'Stern' by the BKA in a multinational law enforcement context marks a significant milestone in the understanding of Trickbot's organization and leadership.