A Key Member of the Conti Ransomware Cybercriminal Group: Vladimir Viktorovich Kvitko (Born October 23, 1984),
known as “Professor”
Версия на русском: https://justpaste.it/dzbft
This assertion is supported by the following evidence:
1. Data from the "Rospassport" System
Vladimir Kvitko is registered and resides in Moscow. However, he was present in the Altai Republic from June 15, 2021, to June 17, 2021. This is confirmed by the record:
-
Temporary Residence Registration:
-
Period: June 15, 2021 – June 17, 2021
-
Address: Altai Republic, Ust-Koksinsky District, Ust-Koksa Village, Sovetskaya Street, Building 87, Unit 1
-
Activity in Jabber from the Conti chat leaks:
During this period, the user “Professor” was inactive on Jabber from June 14, 2021, to June 18, 2021. The first message after this hiatus appears on June 18, 2021:
-
June 14, 2021, 16:57:27 | Professor -> Paranoik | "Decrypt the file, please, for the people."
-
(period of inactivity)
-
June 18, 2021, 10:40:33 | Professor -> Pin | "Hey. I'll be available in a couple of hours. On the road."
2. Data from FSB Border Control Database ("Border")
Vladimir Kvitko's physical movements align with the activities of “Professor” and the cyberattacks executed by the Conti group (based on the timeline in Rocket Chat). Examples of flights:
| Direction | Country | City | Date | Document | GRN | Transport Type | Flight Number | Point |
|---|---|---|---|---|---|---|---|---|
| To | UAE | Dubai | 05.08.2022 | 759207109 | Russia | Air Transport | EK-132 | Moscow (Domodedovo) |
| From | UAE | Dubai | 24.05.2022 | 759207109 | Russia | Air Transport | EK-131 | Moscow (Domodedovo) |
| To | UAE | Dubai | 07.05.2022 | 759207109 | Russia | A6EER Air Transport | EK-132 | Moscow (Domodedovo) |
| From | UAE | Dubai | 26.04.2022 | 759207109 | Russia | Air Transport | FZ-911 | Moscow (Vnukovo) |
| To | UAE | Dubai | 14.10.2021 | 759636455 | Russia | Air Transport | SU-520 | Moscow (Sheremetyevo), Terminal C |
| From | Austria | Vienna | 17.09.2021 | 759636455 | Russia | Air Transport | SU-2185 | Moscow (Sheremetyevo), Terminal C |
| To | Austria | Vienna | 04.09.2021 | 759636455 | Russia | Air Transport | SU-2356 | Moscow (Sheremetyevo), Terminal C |
| From | UAE | Dubai | 01.09.2021 | 759636455 | Russia | Air Transport | SU-521 | Moscow (Sheremetyevo), Terminal C |
| To | UAE | Dubai | 12.08.2021 | 759636455 | Russia | Air Transport | SU-520 | Moscow (Sheremetyevo), Terminal C |
| From | UAE | Dubai | 01.06.2021 | 759636455 | Russia | Air Transport | SU-521 | Moscow (Sheremetyevo), Terminal D |
| To | UAE | Dubai | 05.02.2021 | 759636455 | Russia | Air Transport | SU-524 | Moscow (Sheremetyevo), Terminal D |
| From | UAE | Dubai | 23.01.2021 | 759636455 | Russia | Air Transport | SU-525 | Moscow (Sheremetyevo), Terminal D |
| To | UAE | Dubai | 26.09.2020 | 759636455 | Russia | Air Transport | SU-522 | Moscow (Sheremetyevo), Terminal D |
3. Real Carding
“Professor” specializes in real-world carding, as confirmed by chat conversations:
-
December 23, 2021, 15:51:29 | mango -> professor | "There’s a guy who has his own contact in a bank in India."
-
December 23, 2021, 15:51:44 | mango -> professor | "I thought maybe you, as a true hacker, would find this interesting."
Frequent Trips to Cuba and Iran:
Examples of travel from Moscow:
| Start Date | End Date | Duration | Country | Country+ |
|---|---|---|---|---|
| 28 Aug 2022 | 28 Aug 2022 | Cancelled | Iran | - |
| 10 Feb 2020 | 10 Feb 2020 | Cancelled | Iran | - |
| 8 Feb 2020 | 13 Feb 2020 | 5 days | Iran, Korea | UAE |
| 12 Nov 2019 | 12 Nov 2019 | Cancelled | Iran | - |
| 3 Nov 2019 | 9 Nov 2019 | 6 days | Cuba | Cuba |
| 2 Sep 2019 | 16 Oct 2019 | 1 month, 2 weeks | Iran | Iran |
| 1 Jul 2019 | 1 Jul 2019 | Cancelled | Iran | - |
| 15 Apr 2019 | 23 Apr 2019 | 1 week, 1 day | Iran | Turkey |
| 21 Jan 2019 | 25 Jan 2019 | 4 days | Iran | Turkey |
| 3 Nov 2018 | 9 Nov 2018 | 6 days | Iran | UAE |
| 28 Oct 2018 | 3 Nov 2018 | 6 days | Cuba | France |
| 8 Oct 2018 | 15 Oct 2018 | 1 week | Cuba | Cuba |
| 22 May 2018 | 25 May 2018 | 3 days | Iran | Iran |
| 15 May 2018 | 18 May 2018 | 3 days | Iran | Iran |
| 13 Apr 2018 | 20 Apr 2018 | 1 week | Iran | Austria |
| 4 Apr 2018 | 8 Apr 2018 | 4 days | Cuba | Cuba |
| 31 Oct 2017 | 4 Nov 2017 | 4 days | Cuba | Cuba |
| 27 Oct 2017 | 31 Oct 2017 | 4 days | Kazakhstan | Iran |
| 22 Aug 2017 | 26 Aug 2017 | 4 days | Cuba | Cuba |
| 15 Aug 2017 | 22 Aug 2017 | 1 week | Iran | Iran |
| 3 Jul 2017 | 7 Jul 2017 | 4 days | Iran | Iran |
| 31 Jan 2017 | 5 Feb 2017 | 5 days | Cuba | Cuba |
| 6 Dec 2016 | 11 Dec 2016 | 5 days | Cuba | Cuba |
| 31 Oct 2016 | 4 Nov 2016 | 4 days | Cuba | Cuba |
| 8 Aug 2016 | 13 Aug 2016 | 5 days | Iran | Iran |
| 10 Jul 2016 | 23 Jul 2016 | 1 week, 6 days | Armenia | Cuba |
Explanation:
Cuba is popular destination for real-world carders. The flight to Cuba takes at least 14 hours one way.
4. A New Life in Dubai
Since September 2020, the key offices of the Conti group have been relocating to Dubai. According to our information, one of its core members, known by the alias Professor, whose real identity is Vladimir Viktorovich Kvitko, now resides in the UAE with his family.
Kvitko has not returned to Russia since August 2022, and his Russian driver’s license has expired. To renew his UAE visa, he has traveled twice to the Netherlands and Austria.
His primary focus is organizing processes, training, and overseeing team operations, both online and offline.
Professor has openly expressed his attitude toward money in his own words:
"I don’t really feel the need. Just to make my family happy, maybe invest in something—but no clue in what. Everyone’s busy if they’re investing anyway, and there’s no time for that."
Our investigation indicates that Kvitko leads a relatively modest lifestyle, as evidenced by his property and vehicle records. This stands in stark contrast to another Conti member, known as Target, who, according to our sources, owns an apartment in Moscow City, a Ferrari, two Maybachs with personal security, and numerous other luxury items.
We will provide more details about Target and his activities in our future publications.
Stay tuned for more insights from our ongoing investigation.
🔗 Download All Materials Used in the Investigation: https://mega.nz/folder/p0Qg1STS#zB5W4qpeuVgEFQIPMLxJsw
The archive contains the following:
-
Report from the "Rospassport" System
-
Extract from the FSB Border Control Database, Including Details on Travel Companions
-
Photograph of Driver's License
-
Photos from a Deleted VKontakte Account
-
Archive of Text Files with Personal Data on Kvitko, His Family, Phone Numbers, Emails, Vehicles, and More
-
Report from the "Magistral" System with Data on Purchased Air and Train Tickets
-
Additional Information on Travel Companions
-
Additional Report from a Different "Magistral" Database with More Detailed Ticket Data Source File: magistral_kvitko_2025-02-24.ods
Dossier on Vladimir Viktorovich Kvitko (23.10.1984)
Personal Information
Full Name: Vladimir Viktorovich Kvitko
Date of Birth: 23.10.1984
Documents
Russian Passports:
-
4509506672
-
4598541035
-
4507529087 (Reported lost by the citizen)
Foreign Passports:
-
713878693 (Issued on 05.04.2011)
-
759207109 (Issued on 06.09.2018)
-
759636455 (Issued on 23.11.2018)
Insurance Number (SNILS): 14213520203
Taxpayer Identification Numbers (INN):
-
Personal: 771413746484
-
Problematic: 773387989330 (Multiple INNs assigned)
-
Work-related: 1324128154, 1327011588
Contact Information
Phone Numbers:
-
Primary: +7 915 174 5196, +7 966 155 2524, +7 903 554 3030 (@Qhhjky), +7 834 238 0738 (HR Department, VKM Steel)
-
Other: +7 723 807 38170, +7 751 4133, +7 613 0882, +7 495 613 0882, +7 495 751 4133, +7 985 763 7017, +7 834 238 0738170, +8 834 519 6503, +7 910 443 6755 (@MVKvitko), +7 909 155 1515, +7 930 929 4438
Email Addresses:
-
Primary: kvitkovv84@list.ru, kvitkovv@list.ru, vladimirkv12345@mail.ru, kvitko-v@list.ru, kvitko_k@list.ru
-
Other: kvitko_ksenia@mail.ru, dont@list.ru, kvitkoka85@list.ru, ftt@g.nbhn, fedorocheva@rambler.ru
Social Media:
-
VKontakte: id406756548, id3851747
Related Persons
-
Wife: Ksenia Andreevna Kvitko (19.07.1985)
-
Son: Vladimir Vladimirovich Kvitko (14.01.2015)
-
Sister: Ksenia Viktorovna Kvitko (15.03.1983)
-
Father: Viktor Vladimirovich Kvitko (20.02.1960)
-
Alleged Second Wife: Maria Vladimirovna Samoshkina (05.06.1984)
Transportation
Vehicles:
-
R651CN124: Volkswagen Polo
-
T562KA97: Toyota Corolla
-
A446MO99: Volkswagen Touareg 2011 (father's)
-
A295NN177: Volkswagen Golf
-
N106SA197: Audi A6 (wife, Ksenia Andreevna Kvitko)
-
K427TX777: Audi Q7 (wife, Ksenia Andreevna Kvitko)
-
O047MV777: Mini Cooper (Kamo Misheevich Matevosyan / Anastasia Sergeyevna Dolotova)
Real Estate
-
Apartment: Moscow, Kutuzovsky Prospekt, Building 36A, Block 4, Apt. 1
-
Residential House: Yudanovka, House 114 (137.4 m²)
-
Land Plot: Settlement Voronovskoe, Yudanovka (1200 m²)
-
Garage: Bryansk Post, Building 16, Block 8, Unit 302 (27.9 m²)
Income
Employer: LLC “Management Company RM Rail”
Income:
-
₽4,784,084
-
₽193,729
-
₽30 (various periods)
Other Sources: JSC “Rosselkhozbank”
-
Total Income: ₽3,134,789
-
2018 Income: ₽5,932,082
Travel Companions
-
Alexander Mikhailovich Loginov (27.02.1965): Trips to UAE in 2020–2021
-
Anatoly Ivanovich Degtyarev (11.04.1971): Frequent trips to UAE in 2018–2020
-
Elizaveta Alekseevna Suchkova (30.01.1983): Trips to UAE in 2020–2021