News report

# US Recovers $15 Million From Ad Fraud Group

SecurityWeek, May 19, 2022. That three and a half years after the 2018 action the 3ve scheme is still described as dismantled, with Ovsyannikov and Timchenko arrested, extradited, pleaded guilty and sentenced and Isaev still at large - i.e. no successor operation attributed to the group..

**Source type:** News report

**Published:** May 19, 2022

**Research grade:** S2

**Used in entries:** 1

## Bibliographic record

**Publisher:** SecurityWeek

**Published:** May 19, 2022

**Source type:** News report

**Research grade:** Source grade S2

**Language:** English

**Official record:** Not an official publication

**Address:** [https://www.securityweek.com/us-recovers-15-million-ad-fraud-group/](https://www.securityweek.com/us-recovers-15-million-ad-fraud-group/)

**What it supports:** That three and a half years after the 2018 action the 3ve scheme is still described as dismantled, with Ovsyannikov and Timchenko arrested, extradited, pleaded guilty and sentenced and Isaev still at large - i.e. no successor operation attributed to the group.

**Dataset id:** src\_securityweek\_3ve\_recovery\_2022

## Research notes

- By Ionut Arghire. article:published\_time 2022-05-19T10:36:57+00:00.
- The piece describes 3ve as consisting of three sub-operations including the Kovter botnet; it names Aleksandr Isaev (Russia), Sergey Ovsyannikov and Yevgeniy Timchenko (Kazakhstan).
- It is negative evidence for a resurgence claim - absence of reported successor activity, not an affirmative statement that none exists.

How this source is used

Cited 1 time across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Later activity

1 citation

Cited for activity recorded after the takedown.

-
[No documented return](https://takedownindex.org/takedowns/3ve-ad-fraud-botnet-disruption)

Relationship not established, 3ve ad-fraud botnet disruption

Later outcome

[All sources](https://takedownindex.org/sources)