Conti Ransomware Developer Sentenced to Four Years in Prison

Oleksii Oleksiyovych Lytvynenko, a Ukrainian national, has been sentenced to four years in prison for conspiracy to commit wire fraud in connection with a Conti ransomware operation. The Department of Justice press release notes that Lytvynenko, formerly based in Cork, Ireland, joined a Conti conspiracy to extort victims and steal data between 2020 and 2022.

Conti is described as a ransomware variant that infected more than 1,000 victims worldwide, with attacks spanning 47 U.S. states, 31 foreign countries, the District of Columbia, and Puerto Rico. The FBI has estimated that payouts linked to Conti exceeded $150 million as of January 2022.

Evidence cited in the case shows Lytvynenko possessed data taken from eight U.S. victims and four overseas victims, and he admitted to joining a team run by a Conti conspirator during which he helped develop a loader—malware used to execute further attacks. Forensic artefacts recovered at the time of his July 2023 arrest in County Cork demonstrated ongoing involvement in ransomware activity.

The investigation involved multiple U.S. agencies, with international cooperation from Irish authorities, and Lytvynenko had previously pleaded guilty to wire fraud conspiracy on 10 June. The case illustrates the cross-border nature of ransomware prosecutions and the ongoing pursuit of individuals involved in developing and deploying malware like Conti.