Free tools Windows power users keep installed
One-click scans. No signup required.
On August 12, 2024, the U.S. Department of State offered up to $2.5 million for information leading to the arrest or conviction of Volodymyr Kadariya, a Belarusian-Ukrainian dual national charged in an alleged international malvertising and malware-distribution operation. Prosecutors say the operation used the Angler Exploit Kit and related schemes against millions of internet users. The available record establishes charges, not a conviction, and does not verify Kadariya’s later arrest or the reward’s current status.
What the U.S. reward covered
The reward was announced by the Department of State under its Transnational Organized Crime Rewards Program. The maximum was up to $2.5 million for information leading to Kadariya’s arrest or conviction in any country, according to the Justice Department’s announcement dated August 12, 2024: DOJ announcement.
As an Amazon Associate I earn from qualifying purchases.
“Up to” is important. A tip does not automatically earn money; eligibility, usefulness, and any payment are determined by the program. This is a law-enforcement reward, not a vulnerability or bug bounty. The DOJ release listed [email protected] as the reporting email.
The material available through August 18, 2026, does not establish that Kadariya was arrested, extradited, convicted, or that the reward was withdrawn. Readers should verify any later change through a current official State Department, Secret Service, or Justice Department notice rather than assuming the 2024 offer remains open.
Who is Volodymyr Kadariya?
Justice Department documents describe Kadariya as a Belarusian and Ukrainian dual national. His name can appear as Volodymyr Kadaria or Vladimir Kadaria; reported online aliases include “Stalin,” “Eseb,” and “baxus.”
Prosecutors allege that he helped run malicious advertising, distribute malware, and manage infrastructure used to direct internet traffic. He was charged with Maksim Silnikau and Andrei Tarasov in a New Jersey case. Kadariya should be described as a defendant or alleged cybercriminal, not as a convicted hacker.
The DOJ material does not establish that Kadariya personally created the Angler Exploit Kit. It attributes the alleged leadership and creation of Angler and the Ransom Cartel ransomware operation primarily to Silnikau, while describing Kadariya as a co-conspirator involved in distribution and malvertising.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsRank #2
How the alleged malvertising operation worked
The indictment says the scheme operated from approximately October 2013 through March 2022 and used legitimate-looking online advertising channels to reach victims. Its alleged chain looked like this:
- Acquire advertising access: The conspirators allegedly posed as legitimate advertising companies, using numerous online identities and fictitious entities.
- Control traffic: Traffic-distribution systems and related code evaluated incoming users and decided what content to serve.
- Filter targets: Users considered less vulnerable could receive ordinary advertisements, while potentially exploitable devices were selectively redirected.
- Deliver the payload: Targets could be sent to exploit infrastructure, malware, scareware, phishing pages, or fraudulent offers.
- Monetize access: The indictment alleges sales of “loads” or “bots” (access to compromised devices), “logs” containing stolen credentials or banking information, and additional delivery of malware and scams.
The selective-redirection allegation helps explain how malicious campaigns could hide inside otherwise normal ad traffic and evade screening by advertising platforms and security tools. The DOJ says the malware and scams were delivered to millions of internet users; that figure describes alleged reach, not a court-verified count of infections.
What the Angler Exploit Kit was
An exploit kit is a criminal web platform that probes a visitor’s browser or browser plug-ins for known weaknesses and attempts to exploit them automatically. Angler targeted web software and associated plug-ins during an era when outdated versions of Adobe Flash, Java, Silverlight, and Internet Explorer were common.
Rank #3
Malvertising supplied Angler with a delivery route: a user did not necessarily need to click an obviously criminal link. A compromised or deceptive advertising chain could redirect the browser to exploit infrastructure, which then tried to install malware.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Angler was prominent in the mid-2010s and is widely regarded as inactive by the end of 2016. It is therefore best understood as a historical exploit-kit case, not evidence that Angler itself is an active 2026 product or campaign. Background reporting and contemporary technical context are available from BleepingComputer.
Other alleged crimes and revenue streams
The indictment and DOJ announcement attribute several related activities to the alleged scheme:
- Distributing malware through online advertising and redirected web traffic.
- Displaying scareware warnings that falsely claimed a device had a virus or other serious problem.
- Operating phishing pages designed to collect personal or financial information.
- Selling access to compromised computers and networks as “loads” or “bots.”
- Selling stolen credentials and banking data as “logs.”
- Using already-compromised devices to deliver more malware or scams.
- Defrauding U.S.-based advertising and ad-tech companies.
These are allegations in an indictment, not findings of guilt.
How Maksim Silnikau fits the case
Silnikau was arrested in Poland and extradited to the United States in August 2024. The DOJ describes him as a leader of two multiyear cybercrime schemes and identifies aliases including “J.P. Morgan,” “xxx,” and “lansky.” Prosecutors link him to the Angler Exploit Kit and describe him as the creator and administrator of the Ransom Cartel ransomware strain.
Recommended Free Tools
Kadariya and Tarasov were named as alleged co-conspirators in the New Jersey prosecution. Ransom Cartel is a separate ransomware-related operation; it should not be treated as another name for Angler. The $2.5 million reward was specifically for information about Kadariya, not Silnikau.
Best Value
Charges and potential penalties
The New Jersey indictment (criminal case 23-470) charged Kadariya, Silnikau, and Tarasov with:
- Conspiracy to commit wire fraud.
- Conspiracy to commit computer fraud and abuse.
- Two substantive counts of wire fraud.
The DOJ release lists statutory maximums of up to 27 years for wire-fraud conspiracy, up to 10 years for computer-fraud conspiracy, and up to 20 years for each wire-fraud count. Those are legal maximums, not a prediction of a sentence. Any actual sentence would depend on a conviction, sentencing rules, plea negotiations, and other case-specific factors.
The indictment is available from the Justice Department at the federal court document and the District of New Jersey filing.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Timeline
| Date or period | Event |
|---|---|
| October 2013–March 2022 | Period in which prosecutors allege the malvertising and malware-distribution conspiracy operated. |
| August 12, 2024 | DOJ announces the charges, Silnikau’s extradition, and the State Department reward for information on Kadariya. |
| August 28, 2024 | BleepingComputer publishes its report on the reward. |
| Through August 18, 2026 | No later Kadariya arrest, conviction, or reward-status update is established by the cited record. |
What the reward means for someone with information
- The qualifying result is information leading to Kadariya’s arrest or conviction, not merely an unverified identification or online post.
- The offer is international in scope; the DOJ wording does not limit the arrest or conviction to the United States.
- Payment is discretionary and conditional, with a maximum rather than a guaranteed amount.
- Use the official email in the DOJ notice and avoid social-media accounts, intermediaries, or people promising a guaranteed payout.
What this means for security today
Angler’s historical decline does not make malvertising harmless. The same broad defensive habits remain useful against modern exploit delivery and fraud:
- Keep browsers, operating systems, plug-ins, and endpoint software patched.
- Treat forced redirects, unexpected downloads, and urgent security pop-ups as suspicious.
- Do not install software or remote-access tools offered by a web warning.
- Use reputable browser protections, ad-blocking, DNS filtering, and endpoint controls where appropriate.
Those precautions address the general risks of malicious advertising and exploit delivery; they do not show that Angler itself is operating in 2026.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
