Particle.news
Download on the App Store

Russian Initial Access Broker Gets 81 Months for Aiding U.S. Ransomware Attacks

The case signals a U.S. focus on prosecuting ransomware enablers via extradition, evidence tracing, restitution.

Overview

  • Aleksei Volkov, 26, was sentenced to 81 months in Indianapolis on Monday, closing a case that tied him to ransomware attacks on U.S. companies.
  • The court ordered at least $9,167,198.19 in restitution to identified victims and required the forfeiture of equipment used in the crimes.
  • Prosecutors said he worked as an initial access broker, a specialist who breaks into corporate networks and sells that foothold to ransomware crews including Yanluowang.
  • Investigators linked him to dozens of intrusions that caused more than $9 million in confirmed losses and over $24 million in attempted extortion across U.S. organizations.
  • Italian police arrested Volkov in Rome in January 2024 before his extradition to the U.S., and he pleaded guilty in November 2025 to six counts from cases later consolidated in the Southern District of Indiana.