Ransomware Stern: Suspect Identified by German Police
- German authorities have identified a figure known as "Stern" as a central player in major ransomware operations.This individual is allegedly deeply involved with the Trickbot and Conti groups,...
- While cryptocurrency-tracing firm Chainalysis declined to comment directly on the BKA's identification, they acknowledged the "Stern" persona as one of the most profitable ransomware actors they track. The...
- Keith Jarvis, a senior security researcher at Sophos, noted Stern's organizational role.
german police have zeroed in on “Stern,” a key figure in ransomware operations, with alleged links too the infamous Trickbot and Conti groups. This marks a meaningful progress in the fight against cybercrime, as authorities believe Stern generated considerable revenue from illegal activities, according to the Federal criminal Police Office. News directory 3 has the complete breakdown. Evidence hints at connections to Russian intelligence, adding another layer of complexity to this case. Security experts note Stern’s ability to organize and delegate tasks, making him a crucial player. Could this identification be the start of the dismantling of these malicious networks? Discover what’s next as the inquiry unfolds.
German Police Identify alleged Ransomware Kingpin “Stern”
Updated May 31, 2025
German authorities have identified a figure known as “Stern” as a central player in major ransomware operations.This individual is allegedly deeply involved with the Trickbot and Conti groups, according to a spokesperson for Germany’s Federal criminal Police Office (BKA).
While cryptocurrency-tracing firm Chainalysis declined to comment directly on the BKA’s identification, they acknowledged the “Stern” persona as one of the most profitable ransomware actors they track. The investigation revealed that Stern generated critically important revenue from illegal activities, especially ransomware attacks, the BKA spokesperson said.
Keith Jarvis, a senior security researcher at Sophos, noted Stern’s organizational role. “Stern surrounds himself with very technical people…and he’s willing to delegate substantial tasks to these experienced people whom he trusts,” Jarvis said.
Evidence suggests Stern may have loose connections to Russia’s intelligence apparatus, including the Federal Security Service (FSB). References have been found online to setting up an office for “government topics,” and other Trickbot members have suggested Stern acts as a link between the group and the FSB.
Stern’s consistent involvement was a major factor in the effectiveness of Trickbot and Conti, as was the entity’s ability to maintain strong operational security and remain hidden.
“The investigation revealed that Stern generated significant revenues from illegal activities, in particular in connection with ransomware,” the BKA spokesperson said.
What’s next
The identification of “Stern” could lead to further investigations and potential disruptions of the Trickbot and Conti ransomware networks, impacting the broader landscape of cybercrime and cybersecurity.