{
  "id": "case-kulkov-try2check",
  "slug": "us-v-kulkov-try2check",
  "title": "U.S. v. Denis Gennadievich Kulkov (Try2Check Card Checking Service)",
  "summary": "Creator of Try2Check, the preeminent criminal card-checking platform that processed tens of millions of card verification requests annually for cybercriminals buying stolen credit cards.",
  "case_number": "1:23-cr-00171",
  "court": "U.S. District Court for the Eastern District of New York",
  "district": "E.D.N.Y.",
  "country": "United States",
  "opened_at": "2023-04-18",
  "status": "fugitive",
  "victim_sector": "Financial Services, Payment Networks",
  "victim_country": "United States",
  "loss_amount_usd": 18000000,
  "loss_amount_note": "Earned over $18 million in Bitcoin fees running the unauthorized credit card verification service.",
  "first_seen_at": "2005-01-01T00:00:00Z",
  "last_updated_at": "2026-07-20T16:00:00Z",
  "actor_slug": "try2check",
  "defendant_slugs": [
    "denis-kulkov"
  ],
  "cves": [],
  "techniques": [
    {
      "technique_id": "T1078",
      "evidence_excerpt": "Try2Check executed automated test transactions against merchant payment gateway APIs using stolen account logins.",
      "evidence_locator": "Indictment \u00b6 14, Page 7",
      "mapping_status": "reviewed",
      "mapped_by": "rule",
      "source_title": "Indictment: U.S. v. Kulkov",
      "source_url": "https://www.justice.gov/usao-edny/pr/justice-and-state-departments-announce-action-against-russian-national-operating-major",
      "technique_name": "Valid Accounts",
      "tactic": "Defense Evasion"
    }
  ],
  "events": [
    {
      "event_type": "indictment",
      "event_date": "2023-04-18",
      "description": "Federal indictment unsealed charging Kulkov with access device fraud, computer intrusion, and money laundering; Try2Check domains seized in coordination with Austrian and German authorities."
    }
  ],
  "attack_anatomy": {
    "ground_zero": "Unauthorized intrusion originating from targeted infiltration directed against Financial Services, Payment Networks networks. Creator of Try2Check, the preeminent criminal card-checking platform that processed tens of millions of card verification requests annually for cybercriminals buying stolen credit cards.",
    "blast_radius": "Earned over $18 million in Bitcoin fees running the unauthorized credit card verification service. Impacted Financial Services, Payment Networks infrastructure and associated victim operations.",
    "kill_chain": [
      {
        "phase": "Phase 1: Defense Evasion",
        "title": "Defense Evasion & Security Blindfolding",
        "description": "Try2Check executed automated test transactions against merchant payment gateway APIs using stolen account logins.",
        "technical_artifacts": [
          "T1078",
          "Valid Accounts"
        ],
        "mitre_technique_id": "T1078"
      }
    ],
    "defensive_takeaways": [
      "Enforce phishing-resistant multifactor authentication (FIDO2) across all external remote access endpoints.",
      "Implement network microsegmentation to prevent unrestricted lateral traversal between internal subnets.",
      "Maintain isolated, immutable backups of critical directory services and transaction databases.",
      "Deploy real-time endpoint detection and response (EDR) agents with automated containment policies."
    ]
  }
}