TRJ CYBER INTEL SNAPSHOT
Category: State-Linked Cybercrime / Legal Maneuvering
Features: Stolen payment card trafficking, asset seizure, procedural release
Delivery Method: Malicious carding software, credential skimming
Threat Actor: REvil (aka Sodinokibi) — Russian cybercriminal gang, suspected Kremlin auxiliary
They helped cripple hospitals, extort corporations, and paralyze critical infrastructure across the globe.
They were the face of ransomware terror for years. Now? They’re free.
This week, a Russian court sentenced four members of the infamous REvil ransomware gang — Andrei Bessonov, Mikhail Golovachuk, Roman Muromsky, and Dmitry Korotaev — to five years in prison for trafficking stolen U.S. credit card data. But in a stunning move that has rattled international cybercrime watchers, the court immediately released them, ruling that their time served in pre-trial detention was punishment enough. No probation. No extended monitoring. No financial penalties beyond asset seizure.
Just… gone.
And despite REvil’s legacy as one of the most dangerous cyber gangs in history, this conviction had nothing to do with ransomware. It was about card fraud — the small-time hustle in a big-league empire.
THE CONVICTION THAT WASN’T
The four men were convicted of using malicious software to harvest and exploit stolen credit card data, primarily targeting U.S. citizens. Prosecutors say the operation focused on carding — purchasing, cloning, and selling payment credentials — a relatively low-level crime compared to the ransomware megadeals REvil pulled off during its peak.
Among the confiscated assets:
- 51.8 million rubles (≈ $661,000)
- $497,000 in USD
- Two 2020 BMWs
- One 2019 Mercedes-Benz C200
Yet the men were allowed to walk directly from the courtroom, their detention time credited as served.
That’s not how most justice systems treat international cybercrime. But in Russia — where the line between criminal enterprise and state utility grows thinner by the year — this was less a trial than a transaction.
WHAT HAPPENED TO REvil?
Once considered Russia’s most feared ransomware collective, REvil (short for “Ransomware Evil”) operated with impunity for years — encrypting networks, demanding Bitcoin, and leaking sensitive files from targets like:
- Kaseya (2021 — one of the largest ransomware attacks in history)
- Lady Gaga (personal legal files published)
- Donald Trump (alleged stolen communications during campaign)
- U.S. hospitals and tech vendors
The group vanished from the dark web after the Kaseya incident, but resurfaced in fragmented form before being publicly dismantled by Russian authorities in early 2022 — shortly after a direct call from then-President Joe Biden to President Vladimir Putin, demanding action against the gang.
In a rare concession, the Kremlin launched raids across multiple cities, arresting 14 suspects. It was a brief moment of alignment between Moscow and Washington — and then… Ukraine happened.
Once the war began, cooperation dissolved, and the REvil prosecutions stalled in a fog of procedural delays, postponed hearings, and “disagreements” between Russian prosecutors. Of the 14 arrested, only eight have faced charges, and now, four have been quietly released — under a technicality the Russian judiciary calls “time served.”
A TROJAN HORSE JUSTICE SYSTEM?
Western intelligence officials aren’t fooled. Cybersecurity researchers and ex-KGB analysts have long asserted that groups like REvil serve dual purposes:
Criminal income engines — profiting from global ransomware attacks
Cyberwarfare auxiliaries — executing deniable operations against Western adversaries
By keeping groups like REvil in a legal grey zone — neither fully punished nor publicly protected — the Kremlin maintains plausible deniability while preserving a covert digital militia.
This is the cyber equivalent of a private army — one that can strike supply chains, leak diplomatic files, and cause power grid outages, all while Russia shrugs and says, “We’ve arrested them already.”
“What you’re seeing here is a token conviction — not a takedown,” said one NATO cyber defense analyst. “They were never interested in justice. They were interested in leverage.”
TRJ ANALYSIS: WHEN PUNISHMENT BECOMES PERFORMANCE
This isn’t just about four hackers. It’s about the rules of digital engagement — and how nation-states are redefining lawfare and cyberwarfare under a new doctrine:
Weaponize the criminal. Protect the asset. Perform the sentence.
REvil was never fully dismantled. It was archived. Pieces of its infrastructure have been absorbed into other Russian-aligned operations, many of which now operate under different names, serving military intelligence and state cyber units in the shadow war over Ukraine, Taiwan, and global critical infrastructure.
As for the men who walked free? They may not return to ransomware — but they won’t disappear.
They’ll reappear with new handles. New malware. New orders.
TRJ BLACK FILE: DIGITAL MERCENARIES INDEX
This case has been added to the TRJ Cyber Mercenary Archive as part of the ongoing exposure of Russia’s shadow-state hacking network.
📌 Tracked Entities:
- REvil (Sodinokibi)
- DarkSide / BlackMatter cross-links
- FSB-affiliated hacker deployment rings
- Moscow Regional Criminal Networks – Tier 4 Assets
Truth archived. Threat indexed. Fiction denied.

🔥 NOW AVAILABLE! 🔥
📖 INK & FIRE: BOOK 1 📖
A bold and unapologetic collection of poetry that ignites the soul. Ink & Fire dives deep into raw emotions, truth, and the human experience—unfiltered and untamed.
🔥 Kindle Edition 👉 https://a.co/d/9EoGKzh
🔥 Paperback 👉 https://a.co/d/9EoGKzh
🔥 Hardcover Edition 👉 https://a.co/d/0ITmDIB
Get your copy today and experience poetry like never before. #InkAndFire #PoetryUnleashed #FuelTheFire
🚨 NOW AVAILABLE! 🚨
📖 THE INEVITABLE: THE DAWN OF A NEW ERA 📖
A powerful, eye-opening read that challenges the status quo and explores the future unfolding before us. Dive into a journey of truth, change, and the forces shaping our world.
🔥 Kindle Edition 👉 https://a.co/d/0FzX6MH
🔥 Paperback 👉 https://a.co/d/2IsxLof
🔥 Hardcover Edition 👉 https://a.co/d/bz01raP
Get your copy today and be part of the new era. #TheInevitable #TruthUnveiled #NewEra
🚀 NOW AVAILABLE! 🚀
📖 THE FORGOTTEN OUTPOST 📖
The Cold War Moon Base They Swore Never Existed
What if the moon landing was just the cover story?
Dive into the boldest investigation The Realist Juggernaut has ever published—featuring declassified files, ghost missions, whistleblower testimony, and black-budget secrets buried in lunar dust.
🔥 Kindle Edition 👉 https://a.co/d/2Mu03Iu
🛸 Paperback Coming Soon
Discover the base they never wanted you to find. TheForgottenOutpost #RealistJuggernaut #MoonBaseTruth #ColdWarSecrets #Declassified
Support truth, health, and preparedness by shopping the Alex Jones Store through our link. Every purchase helps sustain independent voices and earns us a 10% share to fuel our mission. Shop now and make a difference!
https://thealexjonesstore.com?sca_ref=7730615.EU54Mw6oyLATer7a

