He's a Russian, he doesn't have to worry about anything as long as he doesn't leave the Russian borders not to mention that he's probably employed by Putin because there's a hacker group that's created by the Kremlin if I recall and there's no exact number of who they really are but most assume that Russian hackers are all under Putin's employment, US can't touch this man, maybe they can do some assassination just like the KGB does but I don't think so, he's going to be a dead man walking though, once he gets out of Russia, that's going to be a really difficult life for him, he's also going to see that it's hard to get away with the authorities. Maybe we'd get some mob justice involved in all of this but given the money that he's got from ransomware, he's going to have a bodyguard 24/7.
The USSR State Security Committee or KGB was in 1954-1991.
You must have a very poor opinion of Russians to think that the government will hire clowns who do cheap PR on the internet.
And you don't know how such problems are solved in Russia. If you have a lot of money, then as soon as your guards know about it, they will want to take your money themselves.