Aleksandr Stepanov
Also known as: JimmBee
Charged
Public record reviewed to August 20, 2026
Index entry last updated August 21, 2026
Alleged lead defendant, DanaBot malware scheme.
Every charge in this entry is an allegation. No conviction is recorded.
- Based in Novosibirsk.
- Named lead defendant in the 16-defendant DanaBot indictment (C.D. Cal.), part of Operation Endgame wave 2.
Everything on this page comes from cited public sources.
This entry records 1 action across 1 takedown, each traced to a cited source. Every linked takedown sits in the verified core of this index. Where the record is silent, this page says so rather than filling the gap.
Legal summary
- Associated takedowns
- Operation Endgame wave 2
- Recorded role
- Lead defendant, DanaBot malware scheme
- Group segment
- Core operator
- Charging authority
- United States Attorney's Office for the Central District of California
- Charging jurisdiction
- Russia
- Case number
- Not published
- Latest recorded action
- Charged, May 2025
- Nationality
- Russia
- Country of residence
- Russia
Associated takedowns
Law enforcement actions against infrastructure and services linked to this person, and the action recorded against the person in each one.
Outcomes and dates follow the public reporting cited on the sources tab and are subject to revision.
1 recorded action across 1 takedown
| Date | Takedown | Target | Connection | Outcome |
|---|---|---|---|---|
| May 22, 2025 , Source [1] | Operation Endgame wave 2 , Operation Endgame | DanaBot, Bumblebee, Lactrodectus, Qakbot, HijackLoader, Trickbot, Warmcookie | Lead defendant, DanaBot malware scheme | Charged . One of 16 defendants; grand jury indictment filed 2022-09-20, unsealed 2025-05-22. |