Alleged Ukrainian-Belarusian hacker detained in US

The alleged leader of an international computer hacking organization is in US custody following his extradition from Poland, US authorities say. Maksim Silnikau, 38, a dual Ukrainian and Belarusian citizen, appeared before a judge in New Jersey, near New York, on Monday and the judge ordered his detention, the US Department of Defense said in a statement. Known under the aliases “JP Morgan”, “xxx”, “lanky”and others, Maksim Silnikau faces charges including computer hacking and identity theft.

“For more than a decade, the defendant used various online disguises and a network of fraudulent advertising campaigns to spread ransomware and defraud American consumers and businesses.”Lisa Monaco, a senior Justice Department official, said in the press release. Also charged in New Jersey are two alleged accomplices: Volodymyr Kadariya, also a 38-year-old Ukrainian-Belarusian citizen, and Andreï Tarasov, a 33-year-old Russian citizen. Maksim Silnikau is accused of spreading the famous Angler exploit kit, a tool used to contaminate millions of users’ computers without their knowledge between October 2013 and March 2022.

Malware that exploits vulnerabilities

According to prosecutors, Angler allowed cybercriminals to plant malware by exploiting vulnerabilities in Internet browsers and their plugins or extensions. Among these software, some fell short “scareware” (Or “alarmware”), which consists of displaying fake messages on the victim’s device claiming that it has been infected with a virus. The goal is to get the victim to download dangerous software that gives cybercriminals remote access to the device.

Maksim Silnikau is also accused in the US state of Virginia of creating the Ransom Cartel ransomware operation in 2021, which allowed hackers to lock and encrypt victims’ data. He faces several decades in prison on all charges. According to the National Crime Agency of the United Kingdom, he was arrested by the Spanish Guardia Civil in an apartment in Estepona (south) in July 2023 during an operation coordinated by this British agency.