Yanluowang Ransomware Access Broker Sentenced to 81 Months in Prison

Post Views: 4

Russian National Sentenced to Nearly Seven Years in Prison for Role in Yanluowang Ransomware Attacks

Aleksey Olegovich Volkov, a 26-year-old Russian national, has been sentenced to 81 months in prison for serving as an initial access broker (IAB) for the notorious Yanluowang ransomware group.

Background on the Case

Volkov pleaded guilty in November to breaching corporate networks and selling access to the Yanluowang ransomware-as-a-service (RaaS) operation between July 2021 and November 2022.

The Charges and Sentence

Between July 2021 and November 2022, Volkov targeted at least eight companies in the United States, exploiting vulnerabilities to gain unauthorized access to their computer systems. The Yanluowang gang then encrypted victims’ data and demanded ransom payments ranging from $300,000 to $15 million.

“According to the Justice Department, as part of his plea, Volkov admitted to hacking into numerous victims’ computer networks, stealing their data, deploying ransomware, demanding payment in cryptocurrency, and dividing the ransom payments among himself and his co-conspirators.”

Investigation and Evidence

The FBI recovered evidence of the Yanluowang gang’s activities, including chat logs, stolen data, victims’ network credentials, and proof of ransom negotiations conducted via compromised accounts.
Investigators traced Volkov’s identity through various digital breadcrumbs, including Apple iCloud data, cryptocurrency exchange records, and social media accounts linked to his Russian passport and phone number.
Revelations from the case include evidence of Volkov’s negotiation of deals with an accomplice for a percentage of the ransom payments, with his share reaching $1.5 million.
A screenshot of a chat with a user named LockBit suggested a potential link to the notorious LockBit ransomware gang.

Sentence and Restitution

Volkov was sentenced to 81 months in prison, significantly shorter than the maximum possible sentence of 53 years. As part of his sentencing, he was ordered to pay over $9 million in restitution to the victims of the Yanluowang ransomware attacks.