Conti Ransomware Developer Sentenced After Irish Arrest and Extradition

Ukrainian national Oleksii Oleksiyovych Lytvynenko, 44, has been sentenced to four years in a US prison for conspiracy to commit wire fraud linked to the Conti ransomware operation. The US Department of Justice said Conti was used between 2020 and 2022 against organisations in 47 US states, 31 foreign countries, the District of Columbia and Puerto Rico. The FBI estimated that victim payouts exceeded $150 million by January 2022, with more than 1,000 victims worldwide.

According to court documents, Lytvynenko joined a Conti team around September 2021 and was directed to develop a “loader” used to deliver software needed for further attacks. Evidence from his online accounts showed he possessed data stolen from eight US victims and four overseas victims; prosecutors linked his activity to at least 12 companies. Forensic evidence recovered when Irish police arrested him in County Cork in July 2023 also indicated continued ransomware activity after Conti’s 2022 shutdown. Police reportedly found a laptop running Cobalt Strike and an active Rocket.Chat session connected through Tor.

Lytvynenko pleaded guilty on 10 June to one count of wire fraud conspiracy, which carried a statutory maximum sentence of 20 years. He was extradited from Ireland to the US in October 2025. The sentence forms part of wider US efforts to prosecute ransomware suspects operating internationally.