A mysterious leaker is exposing the world’s hackers: What is going on?

A shadowy figure operating under the alias GangExposed has emerged as a key player in the fight against cybercrime, leaking sensitive information about top ransomware operatives. Using a combination of OSINT, stylometry, psychology, and access to dark web databases, this individual has managed to unmask leaders of notorious ransomware groups such as Conti and Trickbot.

Leaked identities of major ransomware figures

Among the exposed cybercriminals are Stern and Professor, believed to be responsible for leading some of the most destructive ransomware campaigns in recent years. GangExposed claims that Stern is actually Vitaly Nikolaevich Kovalev, a 36-year-old Russian whose identity has since been confirmed by German authorities. He is suspected of founding Trickbot, also known as Wizard Spider, which used a wide array of malware including Ryuk, Conti, Diavol, and Bazarloader.

The second figure, known as Professor, was identified as Vladimir Viktorovich Kvitko, a 39-year-old Russian allegedly residing in Dubai. Alongside their names, GangExposed also leaked videos, chat logs, and ransom negotiations, revealing the inner workings of these criminal networks.

A lone investigator with unorthodox methods

Despite the complexity of the task, GangExposed claims not to be a cybersecurity professional, but a linguist and philologist who applies intelligence techniques to solve digital puzzles. According to their statements, they purchased access to leaked border control data from the FSB for $250,000 and rejected a possible $10 million reward from the FBI to protect their identity.

Their motivation appears deeply personal: “I enjoy solving complex cases and hope to rid society of some of these criminals,” they told the press.