Belarusian cybercriminal behind Ransom Cartel gets 16-year prison sentence
A Belarusian cybercriminal, Maksim Silnikau, the alleged leader of the Ransom Cartel ransomware operation, has been sentenced to 16 years in prison. He was responsible for developing and administering Ransom Cartel, a ransomware-as-a-service platform that targeted businesses globally, and previously developed the Angler exploit kit. This case highlights the ongoing threat of ransomware and the use of ransomware-as-a-service models.
A Belarusian cybercriminal, Maksim Silnikau, has been sentenced to 16 years in prison for his role as the creator and leader of the Ransom Cartel ransomware operation. U.S. authorities claim Silnikau, who used various online aliases, had been active in the cybercrime world for nearly two decades, previously described by British law enforcement as one of the most prolific Russian-speaking cybercriminals. He developed and administered Ransom Cartel, a ransomware-as-a-service platform that emerged in late 2021 and targeted businesses in the U.S. and abroad.
Prosecutors stated that Silnikau recruited accomplices through underground forums and provided them with stolen credentials, access to compromised networks, and ransomware tools to encrypt victims' systems. The group carried out attacks against at least 18 organizations between 2021 and 2023, including businesses in California, New York, and Nebraska. Before his arrest, Silnikau was also known for developing the Angler exploit kit, a widely used cybercrime tool that generated tens of millions of dollars annually through malicious online advertisements.
Silnikau was arrested in Spain in 2024 and subsequently extradited to the U.S. through Poland to face multiple cybercrime charges in the Eastern District of Virginia. His alleged co-conspirators, Belarusian-Ukrainian Vladimir Kadariya, 38, and Russian national Andrei Tarasov, 33, were charged in absentia in the U.S. together with Silnikau, and they created what prosecutors described as the first ransomware-as-a-service business model in 2011, a product called Reveton.
Reveton extorted approximately $400,000 a month from victims between 2012 and 2014. The case underscores the evolving tactics of ransomware actors and the continued use of established tools and techniques.