The operator behind Ransom Cartel, a ransomware-as-a-service brand that surfaced in 2021, will spend the next 16 years in a US federal prison. Maksim Silnikau, a 40-year-old Belarusian, received that sentence in an Alexandria, Virginia, courtroom on August 5.
The Justice Department says the crew behind the brand hit at least 18 companies between 2021 and 2023, from California and New York to Nebraska and other countries.
Silnikau, who operated under the handles J.P. The man behind the handles Morgan, lansky, and xxx seldom performed the intrusions directly. His role was building the operation around them: the encryption software, credentials purchased from initial access brokers, and a concealed dashboard where affiliates tracked attacks, talked to victims, and divided the take.
He also graded affiliates to reward the productive ones and routed ransom payments through cryptocurrency mixers, bringing structure to a previously disorganized corner of the cybercrime economy.
The sentence adds to a run of ransomware operator convictions and shows prosecutors steadily dismantling the service layer of the ransomware economy rather than chasing individual encryptors. Ransom Cartel’s structure, pairing a branded product with recruited affiliates, foreshadowed the affiliate models that now dominate the threat landscape, and the case is a reminder that the people building the platform face the same courtroom math as the people using it.
