Andrey Ghinkul
No alias recorded
Arrested, Charged
Public record reviewed to August 20, 2026
Index entry last updated August 21, 2026
Alleged administrator of Dridex.
Every charge in this entry is an allegation. No conviction is recorded.
- Alleged administrator of the Dridex botnet.
- Arrested in Cyprus at US request.
Everything on this page comes from cited public sources.
This entry records 2 actions across 1 takedown, each traced to a cited source. At least one linked takedown was added in the extended pass and was not independently source verified. Where the record is silent, this page says so rather than filling the gap.
Legal summary
- Associated takedowns
- Dridex/Bugat/Cridex disruption
- Recorded role
- administrator of Dridex
- Group segment
- Core operator
- Charging authority
- Federal Bureau of Investigation
- Charging jurisdiction
- Cyprus
- Case number
- Not published
- Latest recorded action
- Charged, October 2015
- Nationality
- Moldova
- Country of residence
- Not established
Associated takedowns
Law enforcement actions against infrastructure and services linked to this person, and the action recorded against the person in each one.
Outcomes and dates follow the public reporting cited on the sources tab and are subject to revision.
2 recorded actions across 1 takedown
| Date | Takedown | Target | Connection | Outcome |
|---|---|---|---|---|
| August 28, 2015 , Source [1] | Dridex/Bugat/Cridex disruption , Malware and botnets | Dridex (also known as Bugat/Cridex) | Alleged administrator of Dridex | Arrested . Arrested in Cyprus at US request. |
| October 13, 2015 , Source [1] | Dridex/Bugat/Cridex disruption , Malware and botnets | Dridex (also known as Bugat/Cridex) | Alleged administrator of Dridex | Charged . No further detail published |