Vitaly Kovalev, wanted cybercrime suspect, advised Russian political leader

Vitaly Kovalev, an internationally wanted cybercrime suspect, served as an adviser to Vladislav Davankov, the leader of Russia’s New People party and a deputy speaker of the State Duma. Kovalev, who used the aliases ‘Stern’ and ‘Ben’, was previously included on the party’s federal candidate list for the 2026 State Duma elections before being removed.

Germany’s Federal Criminal Police Office (BKA) identifies Kovalev as the suspected founder and leader of the TrickBot malware group. Operating since at least 2016 with over 100 members, the group is accused of infiltrating computer systems, stealing sensitive data, and deploying ransomware to extort cryptocurrency. The criminal activities have affected hundreds of thousands of systems globally, including hospitals and government agencies, generating hundreds of millions of euros. In Germany alone, authorities estimate damages at least €6.8 million.

Kovalev is also linked to the Conti malware operations and was sanctioned by the EU in July 2026. While he is believed to be living in Russia, his exact whereabouts remain unknown.