Aleksei Volkov, a Russian national, has been sentenced to 81 months in prison for helping major cybercrime groups, including the Yanluowang ransomware operation, to conduct widespread attacks against organizations worldwide.
Volkov, 26, from St. Petersburg, acted as an “initial access broker,” specializing in breaching computer systems and selling the access to other threat actors. Authorities say he facilitated dozens of ransomware attacks across the United States, contributing to more than $9 million in actual losses and over $24 million in intended losses.
Volkov was arrested in Rome and then extradited to the US. According to court documents, Volkov hunted for vulnerabilities in corporate networks and gained unauthorized access, which he then sold to co-conspirators.
The groups deployed ransomware that encrypted victims’ data, disrupting operations and demanding large cryptocurrency payments in exchange for restoring access and withholding stolen data from public release.
Victims faced ransom demands often reaching tens of millions of dollars. Victims who refused to pay the ransom had their sensitive data leaked online. Volkov received a share of ransom payments when they were made.
In November 2025, Volkov pleaded guilty to multiple charges, including access device fraud, aggravated identity theft, conspiracy to commit computer fraud, and conspiracy to commit money laundering. As part of his sentence, he has agreed to pay at least $9.17 million in restitution to victims and to forfeit equipment used in the crimes.