Russian-led cybercrime network dismantled in global operation

theguardian.comPublished: 5/23/2025

Summary

European and North American cybercrime investigators have successfully dismantled a major malware operation led by Russian criminals, resulting in 20 global arrests and indictments. Among the suspects are key figures from the Qakbot and Trickbot families, including Vitalii Kovalev, whose estimated $1 billion cryptocurrency wallet makes him one of the most wanted individuals. His involvement in extensive cyberattacks, including targeting high-profile victims like Marks & Spencer and major healthcare institutions during the COVID-19 pandemic, underscores the growing threat of ransomware-based extortion and espionage activities.