Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service
Maksim Silnikau, a Belarusian national, has been sentenced to 16 years in prison for his role in creating and operating Ransom Cartel, a ransomware-as-a-service operation that targeted over 18 companies globally between 2021 and 2023. He facilitated attacks by providing ransomware, stolen credentials, and a platform for affiliates to manage and profit from the breaches. This case is part of a larger effort to prosecute individuals involved in ransomware operations, with further investigations and prosecutions ongoing.
Maksim Silnikau has been sentenced to 16 years in prison for his involvement in Ransom Cartel, a ransomware-as-a-service operation. Between 2021 and 2023, the operation targeted over 18 companies, including firms in California, New York and Nebraska, and others abroad. Silnikau did not directly carry out most of the intrusions but instead built and managed the business model behind the attacks, providing the ransomware itself, stolen credentials acquired from initial access brokers, and a control panel for affiliates to monitor and negotiate ransom payments. He implemented a rating system to incentivize productive affiliates and utilized cryptocurrency mixers to obscure the flow of ransom payments. The operation began in May 2021 and was rebranded as “Ransom Cartel” in late 2021, with Silnikau actively seeking to promote it on cybercrime forums. He was separately charged in New Jersey alongside Volodymyr Kadariya and Andrei Tarasov for a malvertising scheme using the Angler Exploit Kit. Kadariya remains at large, and the State Department is offering a reward of up to $2.5 million for information leading to his arrest or conviction. The case follows a larger trend of prosecuting individuals involved in ransomware activities, with ongoing investigations and prosecutions.