, a massive coordinated international law enforcement action (including the German
The group utilized various malware variants, including Trickbot , Bazarloader , IcedID , Ryuk , Conti , and Diavol to steal sensitive data and deploy ransomware.
: Ensuring that the "droppers" successfully bypassed endpoint detection, allowing the group to establish a quiet foothold in networks.
Aleksei Valerevich Kovalskii (Алексей Валерьевич Ковалский) "neo", "wild" Date of Birth August 16, 1991 Place of Birth Krasnoyarsk, Russian Federation Nationality Gender Primary Offense Membership in a foreign criminal organization (Cybercrime) Active Timeline Mandated focus since at least June 2021 The Trickbot Syndicate and "Wizard Spider" aleksei valerevich kovalskii updated
: He operates online under the monikers "neo" and "wild" . Personal Profile
The global fight against cybercrime reached a major milestone with Operation Endgame
. Published data confirms he is a Russian national sought by law enforcement agencies, with Germany actively involved in the international arrest warrant tracking. As global cross-border law enforcement collaboration tightens, tracking systems have recently processed updated profiles regarding his personal data and legal status. , a massive coordinated international law enforcement action
The most recent update, as of , identifies him as a key suspect linked to the notorious Trickbot (also known as Wizard Spider) cybercrime group. Key Updates and Background
Data management engines regularly refresh international criminal registries to maintain high match precision for financial institutions and border control agencies.
European authorities continue to solicit active assistance from global cyber security researchers and the public. The BKA is looking for validated updates regarding Kovalskii's active digital footprint, specifically: Personal Profile The global fight against cybercrime reached
Born on , in Krasnoyarsk, Russian Federation, Kovalskii evolved from a localized threat actor into an elite cyber-mercenary. In the underground criminal ecosystem, he adopted the monikers "neo" and "wild".
The term "updated" in the search queries and database entries is crucial. It signifies that the information on Aleksei Valerevich Kovalskii is not static. OpenSanctions, which aggregates data from various official sources, processes updates to reflect new legal developments, such as the issuance of a new Red Notice or changes in a wanted person's status. The fact that his information was processed and updated as recently as May and August 2025 suggests that he remains an active subject of international law enforcement interest. For experts and researchers using the OpenSanctions API, this "last changed" and "first seen" data provides a valuable temporal framework for tracking his case over time.