While he is believed to be living in the Russian Federation, his exact whereabouts remain unknown.
He is currently listed on the OpenSanctions database due to his Interpol Red Notice status. aleksei valerevich kovalskii updated
The Trickbot group has been active since at least 2016, evolving from a simple banking trojan into a sophisticated "malware-as-a-service" operation. The group is responsible for infecting hundreds of thousands of computer systems globally, targeting hospitals, schools, and private companies. While he is believed to be living in
Membership in a criminal organization, cyber-extortion, and data theft The "Trickbot" Connection Kovalskii was prominently featured in
In May 2025, Kovalskii was prominently featured in , a coordinated international crackdown led by European and U.S. authorities targeting major botnet infrastructures.