Intelligence estimates suggest that Kovalskii is currently residing within the borders of the , where he remains shielded from immediate Western extradition. However, his operational capabilities outside of Russia have been completely neutralized due to international border triggers.
His individual tax identification number (INN: 190119721458) is registered in the Republic of Khakassia, Russia. The Rusprofile database also lists other organizations where he served as a director or founder, all of which have also been liquidated. For example, he was the director of another company with a reported revenue of 5.7 million rubles in 2012. The consistent pattern of liquidation across his commercial ventures suggests they were relatively short-lived and may have faced business challenges.
: The infrastructure infected hundreds of thousands of corporate and government computer systems worldwide.
Why does updating Kovalskii’s profile matter beyond historical accuracy? The revised record has implications for three contemporary fields.
The single most significant piece of information in his updated profile is the clear link to an (Source ID: interpol-red-2025-39250 ). An INTERPOL Red Notice is a request to law enforcement worldwide to locate and provisionally arrest a person pending extradition, surrender, or similar legal action. It is not an international arrest warrant but serves as a powerful tool for international police cooperation. The fact that Kovalskii's profile is sourced from the German Federal Criminal Police Office ( de_bka_wanted ) indicates that the request for this notice likely originated from German authorities. aleksei valerevich kovalskii updated
Utilizing malware like Trickbot, Bazarloader, Ryuk, and Conti to infect systems.
Unknown; believed to be shielded within the Russian Federation.
The focus on individuals like Kovalskii is part of a broader, continued effort by the European Union and the United States to combat cyber operations originating from or associated with Russian actors.
, Conti , and Diavol (the ransomware strains used to lock enterprise networks) The Rusprofile database also lists other organizations where
: His current whereabouts are officially unknown, though he is believed to be residing within the Russian Federation . Background on Trickbot (Wizard Spider)
: Suspected member of the "Trickbot" (or "Wizard Spider") criminal organization. : He allegedly operated under the pseudonyms
identifies him as a suspected key figure in global cybercrime, specifically linked to the (also known as "Wizard Spider") criminal organization. Profile Summary Date of Birth: August 16, 1991 Nationality:
Details on his current online presence or communication methods. : The infrastructure infected hundreds of thousands of
Aleksei Valerevich Kovalskii is a Russian citizen identified by authorities through investigations into cyber operations. His profile, often associated with the aliases "neo" and "wild," surfaced prominently in international law enforcement, particularly regarding the group. Key Profile Details: Date of Birth: August 16, 1991 Nationality: Russian Federation Associated Groups: Trickbot (also known as "Wizard Spider") Alleged Roles: Member of a foreign criminal organization 2026 Update: Criminal Charges and Investigations
Disclaimer: This article is based on information available in public law enforcement records and investigative reports as of June 2026. If you're interested, I can also look into: Specific malware types used by the Trickbot group Other members of "Wizard Spider" The specifics of the 2026 EU sanctions updates. ALEXEY VALEREVICH MININ - FBI
Formation of a foreign criminal organization and ongoing cyber-attacks involving malware such as Bazarloader How to Help Law enforcement agencies, including the , are actively seeking information regarding: Any sightings of Kovalskii outside of Russia.
