Search OpenSanctions

Alexander Lefterov

Crime · Wanted

Alexander Lefterov is a person of interest. They have not been found on international sanctions lists.

Type	Person				[sources]
Name	Alexander Lefterov				[sources]
Other name	Aleksandr Lefterov · Alexandr Lefterov · Alipako · Alipatime · Uptime				[sources]
Weak alias	Alipako · Alipatime · Uptime				[sources]
Birth date	1986-12-26				[sources]
Gender	male				[sources]
Nationality	Moldova				[sources]
Citizenship	Moldova				[sources]
Eye color	Brown				[sources]
Hair color	Brown · Brown/Gray				[sources]
Height	5'10"				[sources]
Summary	On April 16, 2023, the U.S. Attorney’s Office for the Western District of Pennsylvania unsealed an indictment charging Moldovan national Alexander Lefterov for computer fraud crimes, aggravated identity theft, and conspiracy to commit wire fraud. According to the indictment, from March 2021 through November 2021, Lefterov, age 37, and his co-conspirators allegedly operated and controlled a botnet comprising thousands of infected computers throughout the United States, including in the Western District of Pennsylvania. Lefterov’s co-co-conspirators allegedly included “coders” who used their technical expertise to maintain and update the botnet over time. During the conspiracy, Lefterov and his co-conspirators stole victims’ login credentials from the infected computers—i.e., usernames and passwords—and then used the credentials to gain access to victim accounts at financial institutions, payment processors, and retail establishments as means to steal money from the victims. To further monetize the scheme, Lefterov allegedly leased the botnet to other co-conspirators by providing them access to infected computers as well as to the victims’ stolen credentials. Lefterov and his co-conspirators also provided access to the botnet for the purpose of distributing malware, including ransomware, to infected computers within the botnet. As the owner and operator of the botnet, Lefterov allegedly received a percentage-share of profits derived from the scheme. The conspiracy to commit computer fraud, unauthorized access of a protected computer to obtain information for financial gain, and conspiracy to commit wire fraud offenses each carry a maximum penalty of five years in prison. The intentional damage to a protected computer offense carries a maximum penalty of ten years in prison, and the maximum penalty for each of the aggravated identity theft offenses is not less than two years of imprisonment to run consecutively to any other term of imprisonment imposed. Under the Federal Sentencing Guidelines, the actual sentence imposed would be based upon the seriousness of the offense and the prior criminal history, if any, of the defendant.The prosecution is being handled by the U.S. Attorney’s Office for the Western District of Pennsylvania.The charges and allegations contained in the indictment are merely accusations, and the defendant is presumed innocent unless and until proven guilty.If you have information regarding this individual, please contact the U.S. Secret Service via email at MostWanted@usss.dhs.gov or via Signal at +1-202-538-5476.				[sources]
Weight	180 lbs · 180 pounds				[sources]
Ethnicity	White				[sources]
Source link	www.fbi.gov · www.secretservice.gov				[sources]
Last change	2025-08-15	Last processed	2025-08-27	First seen	2024-04-17

Descriptions

NCIC: W755473290

— US FBI Most Wanted, 2024-04-17

Lefterov is a citizen of Moldova and last resided in Chisinau, Moldova.

— US FBI Most Wanted, 2024-04-17

Alexander Lefterov is wanted for his alleged involvement in cyber-related crimes. From approximately March of 2021 through November of 2021, Lefterov, using the online monikers "Alipako" and "Uptime" among others, allegedly conspired with others to profit from his operation and control of a botnet comprised of thousands of malware-infected computers. Lefterov and his co-conspirators allegedly used malware to steal victim credentials to online accounts, including accounts at financial institutions, payment processors, and retail establishments, as well as other personal information, from infected computers within the botnet. Lefterov and his co-conspirators allegedly used an online dashboard or panel to monitor the infected computers, access victim credentials, and access victim computers. Lefterov and his co-conspirators also allegedly sold access to the botnet to other cyber criminals, allowing cyber criminals to gain unauthorized access to victims’ online accounts by fraudulently posing as the legitimate account holder.

— US FBI Most Wanted, 2024-04-17

Relevant links: https://www.justice.gov/usao-wdpa/pr/moldovan-botnet-operator-indicted-role-conspiracy-unlawfully-access-thousands-infected, https://www.secretservice.gov/newsroom/releases/2024/04/moldovan-botnet-operator-indicted-role-conspiracy-unlawfully-access

— US Secret Service Most Wanted Fugitives, 2024-06-17