Russian initial access broker who fed ransomware crews gets 81 months in US prison


A Russian national who sold the keys to corporate networks faces nearly seven years in a US prison after prosecutors tied his handiwork to a string of ransomware attacks costing victims millions of dollars.

Aleksei Volkov, 26, was sentenced to 81 months behind bars for his role as an initial access broker, a behind-the-scenes operator who breaks into company systems then sells that foothold to other criminals. He was extradited from Italy to the US to face the charges, part of a broader push by authorities to pursue enablers of cybercrime rather than just the crews that carry out the attacks. Prosecutors say Volkov broke into company networks and sold that access on criminal forums, effectively handing over ready-made entry points to ransomware groups and other extortion outfits.

Read more…
Source: The Register News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • UK signs deal to share police biometric database with US border guards

    July 4, 2022

    The UK has signed up to a US plan for sharing police-held biometric data about citizens with US border officials. According to a member of the European Parliament’s Committee on Civil Liberties, Justice and Home Affairs (LIBE), the body met “informally” with representatives of the US Department of Homeland Security this week to discuss the plans. They ...

  • De-anonymizing ransomware domains on the dark web

    June 28, 2022

    Ransomware operators typically constrain their activities to the dark web to conceal their illegal activities. Their public leak sites and victim communication portals are accessible only on The Onion Router (TOR) network via a specific URL that is only available via direct disclosure. This limits access to fellow operators, victims and security researchers who track ...

  • Europol: Phishing gang behind several million euros worth of losses busted in Belgium and the Netherlands

    June 21, 2022

    A cross-border operation, supported by Europol and involving the Belgian Police (Police Fédérale/Federale Politie) and the Dutch Police (Politie), resulted in the dismantling of an organised crime group involved in phishing, fraud, scams and money laundering. The action day on 21 June 2022 led to: 9 arrests in the Netherlands 24 house searches in the NetherlandsSeizures including firearms, ...

  • International operation takes down Russian RSOCKS botnet

    June 17, 2022

    A Russian operated botnet known as RSOCKS has been shut down by the US Department of Justice acting with law enforcement partners in Germany, the Netherlands and the UK. It is believed to have compromised millions of computers and other devices around the globe. The RSOCKS botnet functioned as an IP proxy service, but instead of ...

  • Hundreds arrested and millions seized in global INTERPOL operation against social engineering scams

    June 15, 2022

    LYON, France — A worldwide crackdown on social engineering fraud has seen scammers identified globally, substantial criminal assets seized and new investigative leads triggered in every continent. The two-month (8 March – 8 May 2022) Operation, codenamed First Light 2022, saw 76 countries take part in an international clampdown on the organized crime groups behind telecommunications ...

  • Five Eyes alliance’s top cop says techies are the future of law enforcement

    June 9, 2022

    Australian Federal Police (AFP) commissioner Reece Kershaw has accused un-named nations of helping organized criminals to use technology to commit and launder the proceeds of crime, and called for international collaboration to developer technologies that counter the threats that behaviour creates. Kershaw’s remarks were made at a meeting of the Five Eyes Law Enforcement Group (FELEG), ...