A mysterious figure known as "GangExposed" has unleashed a comprehensive intelligence operation against one of the world's most notorious ransomware organizations, publicly identifying key leaders of the Conti and Trickbot criminal enterprises through leaked internal communications and personal data.
The whistleblower's revelations have exposed several high-profile cybercriminals, including Vitaly Nikolaevich Kovalev, a 36-year-old Russian operating under the alias "Stern" who led both Trickbot and Conti operations. German authorities later confirmed Kovalev's identity, validating the accuracy of GangExposed's intelligence work.
Perhaps most significantly, the leaks identified Vladimir Viktorovich Kvitko, known within the organization as "Professor," as a 39-year-old Russian national who relocated from Moscow to Dubai.
According to the leaked communications, Kvitko and other Conti leadership established operations in the United Arab Emirates in 2020, using the region as a base for launching cyberattacks against Western targets.
GangExposed leaks include thousands of chat logs, ransom negotiations, and even personal videos showing alleged gang members celebrating on private jets. GangExposed has methodically published detailed profiles of additional key figures, including technical administrator Andrey Yuryevich Zhuykov ("Defender") and senior manager Mikhail Mikhailovich Tsaryov ("Mango").
"This is no longer just a leak — it's a high-stakes intelligence war," noted threat intelligence analysts at FalconFeeds, highlighting the unprecedented scope of the operation.
GangExposed describes himself as an "independent anonymous investigator" who combines classical intelligence analysis with open-source investigation techniques. The whistleblower claims to have obtained the information through semi-closed databases, darknet services, and purchased intelligence, including access to leaked FSB border control records.
Remarkably, GangExposed has foregone potential financial rewards, stating he "burned $10 million" by publicly identifying Professor, referencing the substantial bounties offered by U.S. authorities for information leading to these criminals' capture.