# Aleksandr Stepanov

Also known as: JimmBee

Charged

Public record reviewed to August 20, 2026

Index entry last updated August 21, 2026

_Alleged_ lead defendant, DanaBot malware scheme.

Every charge in this entry is an allegation. No conviction is recorded.

- Based in Novosibirsk.
- Named lead defendant in the 16-defendant DanaBot indictment (C.D. Cal.), part of Operation Endgame wave 2.

Everything on this page comes from cited public sources.

This entry records 1 action across 1 takedown, each traced to a cited source. Every linked takedown sits in the verified core of this index. Where the record is silent, this page says so rather than filling the gap.

Legal summary

**Associated takedowns:** [Operation Endgame wave 2](https://takedownindex.org/takedowns/operation-endgame-wave-2)

**Recorded role:** Lead defendant, DanaBot malware scheme

**Group segment:** Core operator

**Charging authority:** United States Attorney's Office for the Central District of California

**Charging jurisdiction:** Russia

**Case number:** Not published

**Latest recorded action:** Charged, May 2025

**Nationality:** Russia

**Country of residence:** Russia

- [Associated takedowns](https://takedownindex.org/people/aleksandr-stepanov)
- [Legal history](https://takedownindex.org/people/aleksandr-stepanov/legal-history)
- [Charges](https://takedownindex.org/people/aleksandr-stepanov/charges)
- [Sources](https://takedownindex.org/people/aleksandr-stepanov/sources)

## Sources

Every claim on this person's pages traces to one of the entries below.

Official announcements come first, then the reporting that supports individual details.

1 source cited across 1 recorded action

1. [1]
[16 defendants federally charged in connection with DanaBot malware scheme](https://takedownindex.org/sources/usao-central-district-of-california-16-defendants-federally-charged-in-connectio)

USAO Central District of California, May 22, 2025 Prosecutor release Source grade P1

Names lead defendants Aleksandr Stepanov ('JimmBee') and Artem Kalinkin ('Onix') among 16 charged in the DanaBot scheme (part of Operation Endgame wave 2).

No address recorded for this source. Publisher, title, and date are given so it can be retrieved from the publisher.

Coverage note. Nothing on this page rests on an uncited claim. Where a source is silent on an outcome, this entry leaves the outcome unstated rather than inferring one. Every linked takedown sits in the verified core of this index.