He has no public email or contact. Fact: His updated ICCDM profile includes a direct email (a.kovalskii@iccdm.ru) for research correspondence.
According to open-source records maintained by , a database that aggregates global sanctions and watchlist information, Aleksei Valerevich Kovalskii is a male Russian national . Public records indicate he was born in the Siberian city of Krasnoyarsk (KRASNOJARSK), though his exact date of birth is not provided in the primary sanctions listings . OpenSanctions notes that he is a person of interest who has not been found on international sanctions lists; however, this does not diminish his status as a wanted individual .
Aleksei Valerevich Kovalskii (Алексей Валерьевич Ковальский) "neo", "wild" Date of Birth August 16, 1991 Place of Birth Krasnoyarsk, Russian Federation Nationality Active Criminal Era Documented since at least June 2021 Legal Status aleksei valerevich kovalskii updated
Let me verify the note about Trickbot. The search result snippet (11) says: "Der Beschuldigte steht im Verdacht, Mitglied der „Trickbot“-Gruppierung, auch bekannt als „Wizard Spider“, zu sein." I should cite that. I'll open the raw data page for that specific statement. It might be in a different format. I'll search for "Trickbot" within the OpenSanctions pages. search results for "Trickbot OpenSanctions Kovalskii" show a "Vitaliy Nikolayevich KOVALEV", not Kovalskii. However, the earlier snippet (11) specifically mentions "KOVALSKII, Aleksei Valerevich" with a note about Trickbot. I need to find the exact source of that note. I'll search for "KOVALSKII, Aleksei Valerevich" with quotes.'ll open result 0. note is not visible. Maybe it's in a different field, like "Person:notes". I can try to fetch the data in JSON format. The OpenSanctions API might provide it. But for the purpose of this article, the snippet is enough. I'll cite result 11, which shows the note.
Aleksei Valerevich Kovalskii is a Russian national currently wanted by international law enforcement for his alleged involvement in the major cybercrime organization known as (also called Wizard Spider Recent Status and Wanted Notice (2025–2026) April 2026 He has no public email or contact
: Kovalskii is currently a high-priority target for international law enforcement. The German Federal Criminal Police Office (
The Trickbot group has been active since at least 2016, evolving from a simple banking trojan into a sophisticated "malware-as-a-service" operation. The group is responsible for infecting hundreds of thousands of computer systems globally, targeting hospitals, schools, and private companies. Public records indicate he was born in the
As a direct result, national arrest warrants were issued, and by late May 2025, INTERPOL was processing a for Kovalskii. An INTERPOL Red Notice is a request to law enforcement worldwide to locate and provisionally arrest a person pending extradition, surrender, or similar legal action. The specific identifiers for this action are:
One of the more perplexing aspects of the Aleksei Valerevich Kovalskii case is his apparent dual identity. Alongside his wanted status in cybercrime databases, Russian business registries show a person with the exact same full name actively operating as a legitimate entrepreneur.
Kovalskii is currently one of the most-wanted cybercriminals in Europe. His name frequently appears on the EU Most Wanted Whereabouts: