CrimeOwl AI logoCrimeOwl AI
CasesBlogPricingAboutLaw Enforcement
  1. Home
  2. /
  3. Cases
  4. /
  5. ALEXANDER LEFTEROV
Back to CasesMore Cases
Multiple victims of identity theft and financial fraud

The person at the center of this case

Multiple victims of identity theft and financial fraud

Case
#791
SourceFBI WantedUpdated Mar 15, 2026
United States District Court, Western District of Pennsylvania; FBI
Cold Case · Open
4 years waiting · since 2021

ALEXANDER LEFTEROV

Justice for Multiple victims of identity theft and financial fraud — the trail went cold in 2021, but the truth hasn't.

Start here

Key leads to think about

🎯
suspect
Lead #1

What is Lefterov's current location and has he fled to another country beyond Moldova?

🔍
evidence
Lead #2

How many victims were affected by the botnet and what is the total financial loss from the credential theft and fraud?

📞
contact
Lead #3

Which co-conspirators have been identified and apprehended in connection with the botnet operation?

Alexander Lefterov, a Moldovan citizen, is wanted for operating a sophisticated botnet scheme from March to November 2021 that infected thousands of computers to steal financial credentials and personal information. Using aliases including 'Alipako' and 'Uptime,' Lefterov and co-conspirators sold unauthorized access to victims' accounts to other cybercriminals, causing widespread financial fraud. A federal arrest warrant was issued on December 29, 2021, and his current whereabouts remain unknown despite his last known residence in Chisinau, Moldova.

Case
#791
SourceFBI WantedUpdated Mar 15, 2026
United States District Court, Western District of Pennsylvania; FBI

Try asking

Claim this imported case

A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.

10 uploads25 AI questions/day

This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.

More leads to consider

Beyond the top three above — each detail below could be the thread that pulls this case open.

💡
clue
Lead #4

Are the online aliases 'Alipako' and 'Uptime' still active on dark web forums or cybercriminal marketplaces?

Have information about any of these leads?

Even the smallest detail could be the key to solving this case.

Official wording

Source Narrative

Conspiracy to Commit Computer Fraud; Intentional Damage to a Protected Computer; Unauthorized Access of a Protected Computer to Obtain Information for Private Financial Gain; Aggravated Identity Theft; Conspiracy to Commit Wire Fraud Caution: Alexander Lefterov is wanted for his alleged involvement in cyber-related crimes. From approximately March of 2021 through November of 2021, Lefterov, using the online monikers "Alipako" and "Uptime" among others, allegedly conspired with others to profit from his operation and control of a botnet comprised of thousands of malware-infected computers.

Lefterov and his co-conspirators allegedly used malware to steal victim credentials to online accounts, including accounts at financial institutions, payment processors, and retail establishments, as well as other personal information, from infected computers within the botnet. Lefterov and his co-conspirators allegedly used an online dashboard or panel to monitor the infected computers, access victim credentials, and access victim computers.

Lefterov and his co-conspirators also allegedly sold access to the botnet to other cyber criminals, allowing cyber criminals to gain unauthorized access to victims’ online accounts by fraudulently posing as the legitimate account holder. On December 29, 2021, a federal arrest warrant was issued for Lefterov in the United States District Court, Western District of Pennsylvania, after he was charged with Conspiracy to Commit Computer Fraud; Intentional Damage to a Protected Computer; Unauthorized Access of a Protected Computer to Obtain Information for Private Financial Gain; Aggravated Identity Theft; and Conspiracy to Commit Wire Fraud.

Remarks: Lefterov is a citizen of Moldova and last resided in Chisinau, Moldova.

Timeline of Events

🕵️
2021-03-01

Botnet Operation Begins

Lefterov and co-conspirators begin operating botnet comprised of thousands of malware-infected computers

🕵️
2021-11-30

Botnet Operation Ends

Botnet operation ceases; conspiracy period concludes in November 2021

📋
2021-12-29

Federal Arrest Warrant Issued

Federal arrest warrant issued in United States District Court, Western District of Pennsylvania for Conspiracy to Commit Computer Fraud, Intentional Damage to Protected Computer, Unauthorized Access, Aggravated Identity Theft, and Wire Fraud Conspiracy

Key Locations
Interactive map showing important locations related to this case

Case Information

Incident:March 1, 2021
Last Updated:October 29, 2026

Leave a comment

Comments

Case Information

Incident:March 1, 2021
Last Updated:October 29, 2026