The operator behind Ransom Cartel, a ransomware-as-a-service brand that surfaced in 2021, will spend the next 16 years in a US federal prison. Maksim Silnikau, a 40-year-old Belarusian, received that sentence in an Alexandria, Virginia, courtroom on August 5.
The Justice Department says the crew behind the brand hit at least 18 companies between 2021 and 2023, from California and New York to Nebraska and other countries.
Silnikau, who operated under the handles J.P. Morgan, lansky and xxx, rarely carried out intrusions himself. Instead he built the machinery around them: the locking software, credentials bought from initial access brokers, and a hidden panel where affiliates monitored attacks, negotiated with victims and split proceeds.
He also ran a ratings system that rewarded productive affiliates and pushed ransom payments through cryptocurrency mixers, professionalizing a corner of the cybercrime economy that had previously been chaotic.
The sentence adds to a run of ransomware operator convictions and shows prosecutors steadily dismantling the service layer of the ransomware economy rather than chasing individual encryptors. Ransom Cartel’s structure, pairing a branded product with recruited affiliates, foreshadowed the affiliate models that now dominate the threat landscape, and the case is a reminder that the people building the platform face the same courtroom math as the people using it.
