Maksim Silnikau, a 40-year-old Belarusian national and the creator of the Ransom Cartel ransomware group, has been sentenced to 16 years in prison in the United States. He was convicted of conspiracy to commit offenses against the US, conspiracy to commit wire fraud, and aggravated identity theft.

According to prosecutors, Silnikau aka "J.P. Morgan," "xxx," and "lansky," had been active on Russian-speaking cybercrime forums since at least 2005. He was also a member of the notorious Direct Connection cybercrime website from 2011 to 2016, until the site was shut down after its administrator was arrested.

En mayo de 2021, Silnikau creó la operación de ransomware Ransom Cartel y comenzó a reclutar ciberdelincuentes a través de foros underground. Suministraba a los miembros credenciales robadas, información sobre ordenadores comprometidos y herramientas de ransomware utilizadas para cifrar los sistemas de las víctimas. También operaba un sitio web oculto donde los afiliados podían gestionar ataques, comunicarse entre sí, negociar pagos de rescate con las víctimas y distribuir las ganancias.

Between 2021 and 2023, Ransom Cartel affiliates carried out ransomware attacks against at least 18 companies worldwide. During the attacks, the group stole corporate data and demanded ransom payments in exchange for decryption keys or promises not to leak the stolen information.

Los fiscales federales afirmaron que el grupo intentó extorsionar al menos $5.2 millones a las víctimas. Las pérdidas conocidas superaron los $6.7 millones, aunque las autoridades creen que el monto real es mayor porque algunos ataques nunca se denunciaron.

Silnikau was arrested in Spain in July 2023 but escaped while awaiting extradition. He was later caught while attempting to return to Belarus, extradited from Poland to the United States, and prosecuted in the Eastern District of Virginia.

Un hacker responsable de la filtración de Snowflake se declara culpable

A Canadian man has pleaded guilty for his role in the major compromise of cloud storage company Snowflake, which affected at least 165 firms. Connor Riley Moucka, 26, admitted to computer fraud, wire fraud, aggravated identity theft, and conspiracy in a US federal court. He will be sentenced on October 27 and could face up to 32 years in prison.

La fiscalía indicó que Moucka y sus socios utilizaron credenciales de inicio de sesión robadas para acceder a cuentas de clientes de Snowflake entre febrero y octubre de 2024. Robearon miles de millones de archivos de empresas como AT&T, Ticketmaster, Neiman Marcus y Santander.

The stolen data included banking records, passport numbers, driver's license numbers and Social Security numbers. The hackers demanded ransom payments and threatened to release the data online if companies refused to pay.

Las autoridades indicaron que el grupo obtuvo aproximadamente 2,5 millones de dólares en pagos de rescate, mientras que Moucka también ganó casi 500.000 dólares vendiendo datos robados en foros de ciberdelincuencia. Los ataques causaron pérdidas estimadas de 9,5 millones de dólares para las víctimas.

Moucka was arrested in Canada in November 2024 and extradited to the United States in July 2025. Authorities said the hackers gained access by using stolen customer login credentials rather than exploiting a weakness in Snowflake's systems.

Two arrested in Pakistan in connection to Tycoon2FA phishing service

Dos nacionales paquistaníes sospechosos de desarrollar la plataforma de phishing Tycoon2FA han sido detenidos en Pakistán tras una investigación conjunta de la Policía de Singapur (SPF), la Agencia Nacional de Investigación de Delitos Cibernéticos de Pakistán (NCCIA) e Interpol.

Tycoon2FA was a phishing-as-a-service platform that allowed cybercriminals to create fake websites to steal login details and bypass multi-factor authentication. The platform leveraged more than 24,000 domains and has been linked to more than 96,000 phishing victims worldwide. In March 2026, a joint effort seized over 300 domains linked to the service’s core infrastructure.

The more recent arrests took place on 25 June and 1 July 2026 after investigators shared intelligence on the group's activities. Raids in Islamabad, Faisalabad, and Sialkot seized computers, servers, mobile devices, and storage media, while four additional suspects fled Pakistan and are now the subject of Interpol Red Notice requests. Authorities also allege that proceeds from the operation were invested in Islamabad real estate, which authorities are seeking to confiscate.

A former FBI agent charged with $925K cryptocurrency theft

Un ex agente especial supervisor del FBI ha sido imputado después de que los fiscales lo acusaran de robar criptomonedas utilizando frases de recuperación de wallet obtenidas durante investigaciones del FBI.

According to a criminal complaint, Patrick Steven Yaroch allegedly memorized cryptocurrency seed phrases from wallets identified in federal investigations and used them to access the funds. Authorities say he made around 10 to 12 transfers between late 2024 and early 2025.

Las autoridades recuperaron unos $925,426 en criptomonedas vinculadas al caso, aunque los fiscales indicaron que esa cifra podría no representar el monto total presuntamente sustraído. También encontraron unos $165,582 en la cuenta de Kraken de Yaroch.

Court documents say Yaroch admitted to making "very poor decisions" and told investigators he acted out of frustration because the FBI could not seize the wallets. The FBI placed him on leave before firing him, and investigators later recovered electronic devices, a Trezor hardware wallet, and a handwritten seed phrase during a search of his home.

Yaroch was arrested on July 31 and faces charges of interstate transportation of stolen property and receipt of stolen property.

Obtener una demo

ImmuniWeb puede ayudarle a prevenir brechas de datos y cumplir con los requisitos normativos.

A scammer indicted in a $14M travel agency fraud scheme

Un hombre de Costa de Marfil ha sido imputado en relación con una estafa de 14 millones de dólares dirigida contra agencias de viajes. La fiscalía estadounidense ha acusado a Koffi Dongo Parfait Teya, de 30 años, de conspiración para cometer fraude electrónico y uso no autorizado de un dispositivo de acceso.

According to the indictment, Teya and his associates sent phishing emails pretending to be from an airline reservation service. The emails claimed travel agencies needed a security update and directed employees to fake websites that looked like the real login page. Once employees entered their usernames and passwords, the group allegedly used the stolen credentials to book airline tickets and charge the costs to the agencies' accounts.

Las autoridades afirmaron que la estafa causó pérdidas de unos 14 millones de dólares y afectó a aproximadamente 430 agencias de viajes.

Teya was arrested in Côte d’Ivoire with the help of local law enforcement. Authorities say the man will not be extradited to the United States. Instead, Teya is expected to be charged in Côte d'Ivoire.