# Andrey Ghinkul

No alias recorded

Arrested, Charged

Public record reviewed to August 20, 2026

Index entry last updated August 21, 2026

_Alleged_ administrator of Dridex.

Every charge in this entry is an allegation. No conviction is recorded.

- Alleged administrator of the Dridex botnet.
- Arrested in Cyprus at US request.

Everything on this page comes from cited public sources.

This entry records 2 actions across 1 takedown, each traced to a cited source. At least one linked takedown was added in the extended pass and was not independently source verified. Where the record is silent, this page says so rather than filling the gap.

Legal summary

**Associated takedowns:** [Dridex/Bugat/Cridex disruption](https://takedownindex.org/takedowns/dridex-bugat-cridex-disruption)

**Recorded role:** administrator of Dridex

**Group segment:** Core operator

**Charging authority:** Federal Bureau of Investigation

**Charging jurisdiction:** Cyprus

**Case number:** Not published

**Latest recorded action:** Charged, October 2015

**Nationality:** Moldova

**Country of residence:** Not established

- [Associated takedowns](https://takedownindex.org/people/andrey-ghinkul)
- [Legal history](https://takedownindex.org/people/andrey-ghinkul/legal-history)
- [Charges](https://takedownindex.org/people/andrey-ghinkul/charges)
- [Sources](https://takedownindex.org/people/andrey-ghinkul/sources)

## Associated takedowns

Law enforcement actions against infrastructure and services linked to this person, and the action recorded against the person in each one.

Outcomes and dates follow the public reporting cited on the sources tab and are subject to revision.

2 recorded actions across 1 takedown

| Date | Takedown | Target | Connection | Outcome |
| --- | --- | --- | --- | --- |
| August 28, 2015, [Source [1]](https://takedownindex.org/people/andrey-ghinkul/sources#source-1) | [Dridex/Bugat/Cridex disruption](https://takedownindex.org/takedowns/dridex-bugat-cridex-disruption), Malware and botnets | Dridex (also known as Bugat/Cridex) | Alleged administrator of Dridex | Arrested. Arrested in Cyprus at US request. |
| October 13, 2015, [Source [1]](https://takedownindex.org/people/andrey-ghinkul/sources#source-1) | [Dridex/Bugat/Cridex disruption](https://takedownindex.org/takedowns/dridex-bugat-cridex-disruption), Malware and botnets | Dridex (also known as Bugat/Cridex) | Alleged administrator of Dridex | Charged. No further detail published |