Also, just as an additional note: it is not just Russia doing this. Countries where extradition is not an option generally tend to have the largest amount of cyber crime. The list includes China, Germany, Russia, Japan and France. People in these countries generally target Americans, since USA has the second largest amount of internet users (245,203,319)  and has one of the highest GDP in the world. Recently a security firm investigated a Facebook virus called KoobFace and found out its Russian authors, however, they were unable to prosecute them due to Russian Laws
What you say is not correct, at least in regard to Germany. This lets me wonder about the validity of your other statements. In Germany, cyber crime is thoroughly investigated and punished, with no exception when your victims are overseas.
On top of that, the excerpt of Germany's most basic collection of laws you have linked () just states that there will be no extradiction to US. This only means that people will be punished for their crimes within Germany and not in the U.S. - but not that they won't be punished at all.