# Andrey Ghinkul

No alias recorded

Arrested, Charged

Public record reviewed to August 20, 2026

Index entry last updated August 21, 2026

_Alleged_ administrator of Dridex.

Every charge in this entry is an allegation. No conviction is recorded.

- Alleged administrator of the Dridex botnet.
- Arrested in Cyprus at US request.

Everything on this page comes from cited public sources.

This entry records 2 actions across 1 takedown, each traced to a cited source. At least one linked takedown was added in the extended pass and was not independently source verified. Where the record is silent, this page says so rather than filling the gap.

Legal summary

**Associated takedowns:** [Dridex/Bugat/Cridex disruption](https://takedownindex.org/takedowns/dridex-bugat-cridex-disruption)

**Recorded role:** administrator of Dridex

**Group segment:** Core operator

**Charging authority:** Federal Bureau of Investigation

**Charging jurisdiction:** Cyprus

**Case number:** Not published

**Latest recorded action:** Charged, October 2015

**Nationality:** Moldova

**Country of residence:** Not established

- [Associated takedowns](https://takedownindex.org/people/andrey-ghinkul)
- [Legal history](https://takedownindex.org/people/andrey-ghinkul/legal-history)
- [Charges](https://takedownindex.org/people/andrey-ghinkul/charges)
- [Sources](https://takedownindex.org/people/andrey-ghinkul/sources)

## Legal history

Every step recorded in the public legal record for this person, in the order it happened.

These entries describe procedure only. Nothing here establishes guilt, and a charge remains an allegation until a court rules.

1. August 28, 2015

2. October 13, 2015

Record note. Dates follow the earliest official announcement of each step. Where proceedings were subject to reporting restrictions, this entry records only what was published.