Conti Ransomware Member Sentenced to Four Years in Prison for Wire Fraud Conspiracy

Sentencing for Conti Ransomware Involvement

Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national, has been sentenced to four years in prison. His sentencing is a result of his participation in Conti ransomware attacks that occurred between 2021 and 2022. Lytvynenko was arrested in July 2023 in Ireland at the request of the United States and was subsequently extradited.

Role in Conti Operations

Lytvynenko pleaded guilty to conspiracy to commit wire fraud. He admitted to joining the Conti ransomware operation in September 2021, where he controlled stolen data from 12 victims (eight U.S. and four overseas) and sent ransom notes as part of double extortion attacks. He also coded a "loader" malware component for the group.

Impact of Conti Ransomware

The Department of Justice estimates that Conti ransomware attacked networks in 47 U.S. states, 31 foreign countries, the District of Columbia, and Puerto Rico between 2020 and 2022. Victim payouts associated with Conti ransomware exceeded $150 million as of January 2022. Assistant Attorney General A. Tysen Duva noted that Lytvynenko personally harmed at least 12 companies.

Background of the Conti Gang

The Conti ransomware operation emerged from the Ryuk cybercrime group in 2020 and had ties to the TrickBot malware gang. It became known for large-scale attacks against healthcare organizations, governments, and enterprises. The group ceased operations in 2022 due to increased law enforcement pressure and leaked internal communications, with its members subsequently splitting into other ransomware groups such as BlackCat, Black Basta, and Hive.