In a blow to U.S. cybercrime prosecution efforts, Russian hacker Andrei Tarasov has successfully eluded extradition to the United States, making his way back to Russia, according to multiple intelligence reports.
Tarasov, 33, also known by his hacker aliases “Aels” and “Lavander,” was detained in Berlin on July 18, 2023, following a multinational law enforcement operation that also resulted in the capture of his supposed associate Maksim Silnikau in Spain.
After spending six months in Moabit Prison in Berlin, awaiting a possible extradition to the U.S. on charges related to extensive cybercrime, Tarasov’s case took an unexpected turn. The U.S. had indicted him along with Silnikau and Volodymyr Kadariya, accusing them of running a sophisticated global “malvertising” campaign from 2013 to 2022 that affected millions of computers.
The operation involved the infamous Angler exploit kit, which infiltrated systems to exploit security flaws and stealthily deploy malicious software. Tarasov was also said to have created a unique traffic distribution system that circumvented security defenses, allegedly sold for $2,500.
Despite the U.S. Department of Justice accusing the trio of using complex methods to profit from widespread hacking and wire fraud, the Higher Regional Court of Berlin ruled in January 2024 that the U.S. charges lacked sufficient detail to justify extradition, leading to Tarasov’s release and eventual return to Russia.
Arrest Report
After his release, Andrei Tarasov made his way by car through Poland, entering Russia’s Kaliningrad region before ultimately arriving in Moscow, according to a report from Intel741.
On May 5, 2025, Tarasov made a post in a cybercrime forum, revealing his precarious situation: “I’m stuck in Russia, starting from scratch. And I still owe my lawyer.” His case stands out not only for his criminal activities but also due to his previously vocal criticisms of Russia.
In earlier forum messages, Tarasov expressed disdain for the Russian government, once commenting: “The ‘great’ country I knew is now just a circus of fools, obsessed with fighting America.” Intelligence sources suggest he may have sought asylum in Ukraine in the past, citing fears of political persecution back home. Despite his escape from U.S. legal action, Tarasov’s return to Russia has not been without its hardships.
In a more recent post, he shared a cryptic reflection: “In the next nine months, I learned that some places are worse than prison, but that’s another story.”
Meanwhile, his alleged partner in crime, Maksim Silnikau, faces charges in the U.S. for their malvertising operation and for reportedly developing the Ransom Cartel ransomware strain. The UK’s National Crime Agency has also linked the pair to pioneering both the exploit kit and ransomware-as-a-service models.
Tarasov is still on the U.S. Secret Service’s Most Wanted list, with significant rewards offered for any information that leads to the capture of individuals connected to these cybercriminal activities. However, due to Russia’s policy of not extraditing its citizens, Tarasov remains safely beyond U.S. prosecution for the time being.
