Russian Initial Access Broker Sentenced to Over 6 Years for Enabling Ransomware Attacks A U.S. federal court has sentenced 26-year-old Russian national Aleksei Volkov to 81 months in prison for his role as an initial access broker, facilitating high-profile cyberattacks against corporate networks. Volkov’s activities enabled major ransomware groups, including Yanluowang, to breach organizations, resulting in over $9 million in confirmed financial losses and more than $24 million in intended damages. As an initial access broker, Volkov specialized in identifying and exploiting unpatched vulnerabilities in corporate systems. After gaining unauthorized entry, he sold this access to ransomware affiliates, allowing them to bypass early attack stages and deploy malware immediately. His co-conspirators employed double-extortion tactics encrypting critical data while threatening to leak stolen files unless ransom demands, often in the tens of millions, were met. Volkov received a share of the illicit profits when victims paid. Law enforcement arrested Volkov in Rome, Italy, before extraditing him to the U.S. He pleaded guilty to multiple federal charges, including access device fraud, aggravated identity theft, and conspiracy to commit computer fraud and money laundering. In addition to his prison term, the court ordered him to pay over $9.1 million in restitution to victims and forfeited all equipment used in his cybercrime operations.

Rising Scam Texts Exploit Data Breaches and Urgency Tactics A surge in scam texts targeting iPhone users like those received by one individual’s mother over the past month highlights the growing threat of phishing via SMS. These messages, often personalized with the recipient’s name, falsely warn of security vulnerabilities or account issues, urging immediate action via malicious links. While alarming, such texts typically stem from exposed phone numbers rather than a hacked device. The root cause is often data breaches or leaked marketing databases, with cybercriminals purchasing bulk phone numbers for as little as $150 per 100,000 numbers, according to threat intelligence firm ZeroFox. The Identity Theft Resource Center reported a record 3,322 U.S. data compromises in 2025, a 5% increase from 2024 and a 79% rise over five years, fueling these attacks. Scammers exploit psychological triggers, leveraging urgency and technical-sounding language to bypass skepticism. Unlike older scams (e.g., fake prizes), these messages mimic legitimate security alerts, playing on fears of missed threats. Even minimal personal details like a name can make the ruse more convincing. Experts advise against engaging with such texts. Replying confirms an active number, increasing future targeting, while ignoring them risks missing opportunities to report the scam. The recommended response is to report the message as junk, delete it, and forward it to 7726 (SPAM) to aid carrier blocking efforts. Apple and the FTC endorse this approach, emphasizing that legitimate organizations will not request urgent action via unsolicited texts. While standalone scam texts usually indicate broad targeting, red flags like unsolicited password reset emails, unauthorized charges, or locked accounts may signal a deeper compromise. In such cases, affected accounts should be secured immediately. For most recipients, however, deleting and reporting the messages remains the most effective defense.