Maksim Silnikau, the Belarusian cybercriminal who created and administered the Ransom Cartel ransomware-as-a-service operation, has been sentenced to 16 years in prison for his role in ransomware attacks against at least 18 companies worldwide.
Ransom Cartel Operations
Silnikau, 40 years old, developed the ransomware operation in May 2021 using a different name and rebranded it as Ransom Cartel in 2022. Between 2021 and 2023, Silnikau and his co-conspirators carried out attacks against at least 18 companies, companies in California, New York, and Nebraska, which are potentially HIPAA covered. The attacks resulted in over $6.7 million in losses. The group also attempted to extort at least $5.2 million from victims.
Silnikau served as the administrator of the operation rather than conducting many of the intrusions himself. His activities included purchasing stolen credentials from initial access brokers, recruiting affiliates to conduct ransomware attacks, negotiating with victims, using cryptocurrency mixers to conceal proceeds, and dividing money from the attacks with affiliates.
The operation functioned as a ransomware-as-a-service model in which Silnikau recruited other cybercriminals to conduct attacks around the world.
Previous Cybercrime Activity
Silnikau had been involved in cybercrime activities before creating Ransom Cartel. He was reportedly a core member of the REvil ransomware operation and had took part in Russian cybercrime forums beginning 2005. He was also a member of Direct Connection, a cybercrime website, since 2011 until the website was shut down in 2016.
Between October 2013 and March 2022, Silnikau was involved in distributing the Angler exploit kit as well as different malware distribution and malvertising schemes. Silnikau was separately charged in New Jersey with participation in the distribution of the Angler exploit kit. The indictment involved a Ukrainian national and a Russian national.
Arrest and Extradition
An international law enforcement investigation led to Silnikau’s arrest in Spain on July 18, 2023. Silnikau fled while awaiting extradition to the United States to face the charges. He was later recaptured while attempting to return to Belarus from Poland. Silnikau was deported from Poland to the United States in 2024. He faced the charges in the Eastern District of Virginia.
Conviction and Sentence
Prosecutors charged Silnikau with seven counts. He was convicted on three counts: conspiracy to commit offenses against the United States, aggravated identity theft, and wire fraud. The court sentenced Silnikau to 16 years in prison for his role in the ransomware operation.
Image credit: 157105030 – Proxima Studio, AdobeStock
