Vitaly Kovalev
Vitaly Kovalev is publicly identified in sanctions material as a senior figure associated with TrickBot and Conti, with aliases including Bentley, Bergen, Alex Konor, Benny, Ben and Stern. His profile is a persona-level bridge between sanctions, TrickBot/Wizard Spider ecosystem attribution and ransomware-enabled cybercrime.
This profile should be interpreted as a structured intelligence artifact for 3C-INT/CRIPRO. It separates actor-controlled claims, official designations, vendor/public reporting and analytical inference. For persona profiles, the highest-confidence information concerns identity labels, public role, sanctions/designation context and associations; technical capability should be inherited from the associated group or malware ecosystem only when explicitly supported.
INFERENCE (confidence: medium): The defensive value of this profile is strongest when used to enrich relationship graphs, sanctions/persona pivots, campaign correlation, and detection priorities rather than as a standalone proof of operational control by any single individual.
ATT&CK
MITRE ATT&CK
Research