A particularly successful Russian hacker is about to serve time behind bars in the US. A federal judge has sentenced Aleksei Burkov, the operator of an elite cybercrime forum, to nine years in prison after pleading guilty in January to two device fraud charges. He’d faced up to 15 years in prison, but that plea apparently didn’t help him avoid most of the punishment.

The invitation-only forum, DirectConnection, let hackers and other online crooks sell their services and stolen goods so long as they had $5,000 and the backing of three current members. The charges also revolved around Burkov’s control of Cardplanet, a site that sold payment card numbers. Over $20 million in bogus purchases were made using stolen US credit cards.

Burkov was arrested in 2015 at an airport near Tel Aviv. In 2017, an Israeli district court approved his extradition to the US, but Russia fought that decision for years. As Krebs on Security points out, the Russian government may be concerned that Burkov knows too much.

In late 2019, Burkov was extradited to the US, and according to the US Attorney’s Office, he pleaded guilty to access device fraud and conspiracy to commit computer intrusion, identity theft, wire and access device fraud and money laundering. He faces up to 15 years in prison when he’s sentenced on May 8th.

Burkov ran a website called Cardplanet, which sold card data, much of which belonged to US citizens. He also ran DirectConnection, an invitation-only website, where elite cybercriminals could advertise stolen goods, like personally identifying information and malicious software, as well as services, like money laundering and hacking. According to the US Attorney’s Office, members had to be vouched for by three existing members and provide a sum of money, normally $5,000, as insurance.

Other DirectConnection members included Maksim Yakubets of Moscow and Russian national Peter Levashov. In December, the FBI offered a $5 million reward for info leading Yakubets’ arrest, and as you may remember, Levashov ran the notorious global spam botnet Kelihos. Burkov’s plea represents another symbolic victory for American law enforcement’s fight against international cybercriminals.