Russian Hacker Jailed for 81 Months Over $9M Ransomware Assaults – Decrypt

A courtroom within the Southern District of Indiana sentenced Russian citizen Aleksei Volkov, 26, to 81 months in jail Monday for aiding main cybercrime teams together with the Yanluowang ransomware group in assaults that prompted over $9 million in precise losses and over $24 million in meant losses throughout the USA.

Volkov, of St. Petersburg, Russia, operated as an “preliminary entry dealer”—a specialist who good points unauthorized entry to company networks and sells that entry to different risk actors, based on courtroom paperwork. His patrons used the entry to deploy ransomware that encrypted victims’ information, then demanded cryptocurrency funds—”typically within the tens of hundreds of thousands of {dollars}”—in trade for restoring entry and never publishing stolen information on leak websites.

On November 25, 2025, Volkov pleaded responsible to 4 counts from the Southern District of Indiana indictment—illegal switch of a method of identification, trafficking in entry info, entry system fraud, and aggravated id theft—plus two counts from the Japanese District of Pennsylvania indictment for conspiracy to commit laptop fraud and conspiracy to commit cash laundering. Police in Rome, Italy, had arrested Volkov earlier than his extradition to the USA.

As a part of his plea settlement, Volkov admitted that he and co-conspirators “demanded tens of hundreds of thousands of {dollars} in ransom and obtained hundreds of thousands,” with Volkov receiving a share of cryptocurrency ransom funds. The courtroom ordered him to pay full restitution together with virtually $9.2 million to recognized victims and to forfeit tools utilized in his crimes.

Ransomware and crypto

Ransomware, usually leveraging cryptocurrency for fee, stays a problem for the crypto area. Per Chainalysis’ 2026 Crypto Crime Report, on-chain ransomware funds totaled $820 million in 2025, down 8% year-on-year, whereas claimed assaults elevated by 50% and the median ransom fee grew 368% year-over-year to almost $60,000.

In current months, ransomware builders have turned to blockchain good contracts as a distribution channel, together with the DeadLock ransomware pressure that leverages Polygon good contracts for proxy server tackle rotation and distribution, and EtherHiding, which targets BNB Sensible Chain and Ethereum good contracts.