Aleksei Olegovich Volkov, a 25-year-old Russian, pleaded guilty to multiple charges related to his role in ransomware attacks as an initial access broker for the Yanluowang group. From July 2021 to November 2022, Volkov and his co-conspirators targeted seven U.S. businesses, two of which paid a total of $1.5 million in ransoms. The victims included an engineering firm and a bank, both of which faced harassment and disruption due to distributed denial of service attacks following the data breaches. Volkov exploited system vulnerabilities to gain access to these networks, then shared that access for a flat fee or a portion of the ransom. Prosecutors estimated that the total ransom demanded from all victims was around $24 million. The FBI traced cryptocurrency payments back to Volkov and a co-conspirator in Indianapolis, using blockchain analysis to confirm his identity and uncover communication channels related to their criminal activities. Volkov was arrested in Rome on January 18, 2024, and extradited to the U.S., where he remains in custody. He pleaded guilty on October 29 to six charges, including identity theft and conspiracy to commit computer fraud. While there’s no agreed-upon sentence yet, he faces up to 53 years in prison and must pay nearly $9.2 million in restitution to the affected victims.