Crime syndicates are often compared to serpents, with the most effective method of neutralization being the figurative cutting off of their heads. By securing a 16-year prison sentence in a plea deal with the leader of a pack of cybercriminals specializing in extorting U.S. companies, the U.S. Department of Justice hopes to have defanged this particular nuisance.
On August 5, 2026, the Justice Department (DOJ) announced the sentencing of Belarusian national Maksim Silnikau, the creator and de facto boss of the “Ransom Cartel,” in the Eastern District of Virginia. The plea deal resulted from a joint operation with the FBI, the Secret Service, the U.S. Attorney’s Office for the District of New Jersey, and the DOJ’s Computer Crime and Intellectual Property Section. Silnikau pleaded guilty to charges that included conspiracy to commit offenses against the United States, conspiracy to commit wire fraud, and aggravated identity theft. Along with accused conspirator Andrei Tarasov, he faces additional charges for unrelated crimes in New Jersey.
Silnikau’s Ransom Cartel used stolen credentials and malware to attack at least 18 companies between 2021 and 2023, attempting to extort at least $5.2 million while also causing a conservative estimate of $6.7 million in total losses among businesses, including a group of law firms. While this particular ransomware strain has been decapitated, there are plenty of other cybersnakes out there.
No, Not That J.P. Morgan
Studies indicate that ransomware attacks and the ensuing extortion continue to rise, despite many victims who choose not to come forward. Using inside information, “malvertising,” Angler Exploit Kits, and other methods, hackers can gain access to a company’s computers and information. Once they have control, they can demand ransom to not harass the victim’s clients, agree not to release valuable or sensitive data, or provide decryption keys that restore access to the system.
Silnikau, who used cheeky online handles like “J.P. Morgan” and “lansky,” and had been active on Russian-speaking cybercrime forums since 2005, began operations with the Ransom Cartel in 2021. This included recruiting members and buying information on underground forums. Originally titled “XXX,” Silnikau operated his new gang as a ransomware-as-a-service business, supplying the group’s members with ransomware tools and specific targets, mostly in the U.S. He also operated a hidden website for the Cartel that allowed them to monitor and control their attacks.
Instead of attacking larger companies with greater funds but also stronger cybersecurity, the Ransom Cartel focused on smaller businesses with weaker defenses. This led to losses beyond the ransoms, as the afflicted firms needed to divert employees and hire lawyers, information technology maintenance, and cybersecurity experts to deal with the intrusion.
For two years, Silnikau prospered as the Ransom Cartel carried out its attacks, flaunting luxuries like a Rolex watch and a Bentley Bentayga while living in Switzerland and Spain. He went on the run after being detained in Spain to be extradited to the U.S. He was captured in Poland as he attempted to return to his native Belarus.
Coming Clean and Brokering Deals
Based on Silnikau’s Presentence Investigation Report (PSR), the DOJ’s sentencing recommendation offers interesting insight into determining how the court arrived at an imprisonment term of 16 years. In the Eastern District of Virginia, Silnikau pleaded guilty to conspiracy involving computer damage, computer extortion, and computer intrusions; wire-fraud conspiracy; and aggravated identity theft. The government agreed to seek dismissal of the remaining Virginia counts at sentencing.
While identifying the serious and intentional nature of Silnikau’s foray into building a criminal enterprise and the carnage it wreaked among his victims, it also had to acknowledge that the Ransom Cartel founder was a first-time offender, placing him in Criminal History Category I. His taking a plea also reduced his offense level by a point.
On the other side of the ledger, the level went up four notches due to Silnikau’s role as the creator/operator of the Ransom Cartel. One count carried a mandatory two-year sentence, which had to be considered along with his final offense level of 38. The PSR calculated a 235- to 293-month Guidelines range before statutory caps. The mandatory two-year identity-theft sentence had to run consecutively. The court ultimately decided on 16 years (192 months). Silnikau is also required to make full restitution to his victims, and the presentence report indicated that he was likely to be deported immediately after his sentence.
