Threat actorRussiaTracked since 2026-07

Vitaly Kovalev

Also known as:Trickbot-Conti Syndicate

As of 2026-07-14, Vitaly Kovalev is a Russia-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning ransomware. Also known as Trickbot-Conti Syndicate.

Tracked threats: 11 high
First seen: 2026-072026-07-14
Last seen: 2026-072026-07-14
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: RussiaNation or origin

Nation: Russia · 1 tracked threat(s) · Categories: RANSOMWARE

Activity timeline

Vitaly Kovalev appears in 1 tracked threat between 2026-07-14 and 2026-07-14.

Tracked threats

US/EU/UK Sanction Vitaly Kovalev ("Stern"), Trickbot/Conti Administrator Linked to $300M+ in Ransomware PaymentsHIGH2026-07-14