# Andrey Ghinkul

No alias recorded

Arrested, Charged

Public record reviewed to August 20, 2026

Index entry last updated August 21, 2026

_Alleged_ administrator of Dridex.

Every charge in this entry is an allegation. No conviction is recorded.

- Alleged administrator of the Dridex botnet.
- Arrested in Cyprus at US request.

Everything on this page comes from cited public sources.

This entry records 2 actions across 1 takedown, each traced to a cited source. At least one linked takedown was added in the extended pass and was not independently source verified. Where the record is silent, this page says so rather than filling the gap.

Legal summary

**Associated takedowns:** [Dridex/Bugat/Cridex disruption](https://takedownindex.org/takedowns/dridex-bugat-cridex-disruption)

**Recorded role:** administrator of Dridex

**Group segment:** Core operator

**Charging authority:** Federal Bureau of Investigation

**Charging jurisdiction:** Cyprus

**Case number:** Not published

**Latest recorded action:** Charged, October 2015

**Nationality:** Moldova

**Country of residence:** Not established

- [Associated takedowns](https://takedownindex.org/people/andrey-ghinkul)
- [Legal history](https://takedownindex.org/people/andrey-ghinkul/legal-history)
- [Charges](https://takedownindex.org/people/andrey-ghinkul/charges)
- [Sources](https://takedownindex.org/people/andrey-ghinkul/sources)

## Sources

Every claim on this person's pages traces to one of the entries below.

Official announcements come first, then the reporting that supports individual details.

1 source cited across 2 recorded actions

1. [1]
[Dridex botnet disrupted; administrator Andrey Ghinkul charged](https://takedownindex.org/sources/us-doj-fbi-uk-nca-dridex-botnet-disrupted-administrator-andrey-ghinkul-charged)

US DOJ / FBI / UK NCA, October 13, 2015 Prosecutor release Source grade S2

Establishes the Dridex disruption and the charge/arrest of Andrey Ghinkul in Cyprus.

No address recorded for this source. Publisher, title, and date are given so it can be retrieved from the publisher.

Coverage note. Nothing on this page rests on an uncited claim. Where a source is silent on an outcome, this entry leaves the outcome unstated rather than inferring one. At least one linked takedown was added in the extended pass and was not independently source verified.