Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison
A U.S. court imposed a four-year prison term on Oleksii Oleksiyovych Lytvynenko, a Ukrainian national, for his involvement in the Conti ransomware operation.
Sentencing Details
Oleksiyovych Lytvynenko, 44, was detained in Ireland in 2023 and transferred to the United States in late 2025. He entered a guilty plea in June 2026 for wire fraud, acknowledging his role in creating malware for the Conti group and holding stolen data from victims. The maximum possible sentence for his charges was 20 years. Authorities initially stated that Lytvynenko collaborated with the cybercriminal network between 2020 and 2022, during the group’s active period. However, during his plea hearing, he confirmed joining the operation in September 2021. His responsibilities included developing a malware loader, while investigators discovered victim data in his possession, indicating potential participation in ransomware attacks. Law enforcement determined that Lytvynenko continued engaging in cyber extortion activities even after the Conti operation ceased, until his arrest.
Role in Conti Ransomware
The Conti ransomware collective is estimated to have collected at least $150 million in ransom payments by encrypting systems and threatening to disclose stolen information unless victims complied. The group targeted entities across more than 30 countries, including all U.S. states. This sentencing follows recent convictions of other ransomware affiliates, such as Latvian national Deniss Zolotarjovs, who received an 8.5-year term for his role in the Karakurt ransomware operation, and a Belarusian individual linked to the Ransom Cartel, who was sentenced to 16 years for leading a ransomware scheme.
About Author
English