A US court has sentenced Russian national Aleksei Volkov to 81 months in prison for facilitating ransomware attacks that caused more than $9 million in losses.
Volkov operated as an “initial access broker,” selling unauthorised network access to cybercrime groups that deployed ransomware and demanded cryptocurrency payments from victims.
Court documents showed the attacks generated over $24 million in intended losses, with Volkov admitting he received a share of ransom payments, “sometimes in the tens of millions of dollars.”
The 26-year-old, from St Petersburg, pleaded guilty to multiple charges including identity theft, access device fraud and conspiracy to commit computer fraud and money laundering.
He was arrested in Rome before being extradited to the United States, with the court ordering him to pay about $9.2 million in restitution and forfeit equipment used in the crimes.
The case underscores the continued use of cryptocurrency in ransomware operations, where attackers encrypt data and demand digital payments to restore access or prevent data leaks.
According to Chainalysis, ransomware payments reached $820 million in 2025 despite a decline in total value, as attacks increased and average ransom demands surged significantly.