Four members of the REvil ransomware group have been released from custody despite pleading guilty to fraud and malware distribution charges. The Dzerzhinsky Court of St. Petersburg allowed Roman Muromsky, Andrei Bessonov, Mikhail Golovachuk, and Dmitry Korotaev to walk free after sentencing them to five years in prison on Monday, ruling that the gang members had spent enough time in a Russian detention center while awaiting trial.

According to Russian state-owned news agency TASS, Muromsky, Bessonov, Golovachuk, and Korotaev confirmed they were involved in REvil activities between October 2015 and January 2022, and primarily targeted US citizens. This includes “carding,” a form of fraud and laundering that involves using stolen credit card information to buy prepaid gift cards.

The court also ordered Bessonov to surrender two 2020 BMWs, and a 2019 Mercedes-Benz C200 and more than $1 million (in rubles and US dollars) to be seized from Korotaev. The sentencing did not include any fines.

A total of 14 REvil members were arrested in January 2022, four of whom — Daniil Puzyrevsky, Artem Zayets, Alexey Malozemov, and Ruslan Khansvyarov — were handed prison sentences of up to six and a half years in October. It is not currently believed that any of them have been, or will be, extradited to the US.