U.S. v. Denis Gennadievich Kulkov (Try2Check Card Checking Service)
Key Facts
- Legal Status: FUGITIVE in U.S. District Court for the Eastern District of New York.
- Primary Target Sector: Financial Services, Payment Networks.
- Documented Financial Loss: $18.0 million.
- 1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.
Incident Overview
Creator of Try2Check, the preeminent criminal card-checking platform that processed tens of millions of card verification requests annually for cybercriminals buying stolen credit cards.
Root Cause & Infiltration Vector
Initial access established against Financial Services, Payment Networks infrastructure via compromised credentials, unmonitored perimeter services, or targeted spearphishing lures. Creator of Try2Check, the preeminent criminal card-checking platform that processed tens of millions of card verification requests annually for cybercriminals buying stolen credit cards.
Operational Impact & Financial Blast Radius
Resulted in $18,000,000 in documented financial liabilities. Earned over $18 million in Bitcoin fees running the unauthorized credit card verification service.
Executive Risk Checklist
- 1. Are 100% of external and administrative access portals protected by phishing-resistant MFA?
- 2. Is network microsegmentation enforced between user workstations and core database enclaves?
- 3. Have immutable offline backups and incident escalation procedures been validated within 90 days?
Incident Execution & Kill-Chain Lifecycle
Sequential reconstruction of intrusion stages from initial infiltration to resolution.
Try2Check executed automated test transactions against merchant payment gateway APIs using stolen account logins.
Adversaries navigated internal subnets, elevating system permissions and harvesting credentials to expand administrative access across Financial Services, Payment Networks infrastructure.
Creator of Try2Check, the preeminent criminal card-checking platform that processed tens of millions of card verification requests annually for cybercriminals buying stolen credit cards.
Standard of Care Remediation & Hardening
Empirical engineering takeaways and preventative controls derived from this incident.
Procedural & Incident Timeline
Federal indictment unsealed charging Kulkov with access device fraud, computer intrusion, and money laundering; Try2Check domains seized in coordination with Austrian and German authorities.
Named Defendants & Operatives
| Defendant | Nationality | Status | Prison Term | Restitution | Notes |
|---|---|---|---|---|---|
| Denis Gennadievich Kulkov | Russian Federation | fugitive | Pending | None | Creator of Try2Check stolen card verification service; indicted in E.D.N.Y. |
Substantiated MITRE ATT&CK Techniques
| Technique ID | Technique Name & Tactic | Primary Source Evidence Excerpt | Locator | Verification |
|---|---|---|---|---|
| T1078 | Valid Accounts Defense Evasion | "Try2Check executed automated test transactions against merchant payment gateway APIs using stolen account logins." | Indictment ¶ 14, Page 7 | reviewed |