Russian Access Broker Gets Nearly 7 Yrs for Enabling Millions in Ransomware Extortion

Aleksei Volkov, a 26-year-old Russian national, was sentenced to 81 months in prison for acting as an initial access broker who sold stolen network credentials that enabled numerous ransomware attacks against U.S. organizations. His sales of unauthorized access to groups like Yanluowang helped cause over $9 million in actual losses and more than $24 million in intended losses, highlighting the impact of prosecuting upstream access brokers. #AlekseiVolkov #Yanluowang

Keypoints

Volkov operated as an initial access broker, locating vulnerabilities and selling network access to cybercriminals.
He facilitated dozens of ransomware attacks across the United States, causing over $9 million in actual losses.
His customers included the Yanluowang group, which has targeted major enterprises such as Cisco.
Volkov was arrested in Italy after a Bitcoin transaction linked him to the crimes and was extradited to the U.S.
Prosecuting access brokers seeks to disrupt the ransomware supply chain by removing upstream capabilities.