Germany Identifies Russian Leader of Conti, TrickBot Ransomware Gangs

German federal police and local prosecutors have identified Vitaly Nikolaevich Kovalev, a 36-year-old Russian, as 'Stern,' the elusive leader of the notorious Trickbot and Conti ransomware cybercrime gangs. Kovalev, who is believed to be in Russia and thus protected from extradition, is wanted by Germany for allegedly being the ringleader of a criminal organization, as confirmed by an Interpol red notice. This revelation came amid a series of law enforcement actions including Operation Endgame, which targeted malware infrastructure and cybercriminals associated with Trickbot, known for using malware variants like Bazarloader and Ryuk. The identification of Kovalev was also supported by a whistleblower known as GangExposed, who leaked internal files and chat logs exposing key figures in these gangs, including Kovalev and another leader named Vladimir Viktorovich Kvitko. Prior leaks such as TrickLeaks and ContiLeaks had exposed detailed communications and identities of gang members, illustrating Kovalev's central role and control over operations. Despite previous sanctions and indictments targeting other members, Kovalev's identity remained undisclosed until recent coordinated efforts by German authorities and whistleblower disclosures brought it to light.