This article details the successful prosecution of an individual involved in the Ryuk ransomware operation, which gained initial network access to deploy ransomware and extort victims between 2019 and 2020. The threat actors encrypted systems and received millions in Bitcoin ransom payments, primarily targeting corporate networks across various sectors including healthcare and education. The case highlights the legal consequences for ransomware affiliates, including extradition, potential prison sentences, and substantial financial restitution.
Ransomware Armenian man pleads guilty to deploying Ryuk ransomware July 10, 2026 Share By SC Staff (Adobe Stock) Bleeping Computer reports that Karen Serobovich Vardanyan, a 34-year-old Armenian national, has pleaded guilty in the United States to charges related to deploying the Ryuk ransomware. Vardanyan was extradited to the U.S. after his arrest in Kyiv in April 2025 for providing initial access to corporate networks. Between November 2019 and April 2020, he and his co-conspirators illegally accessed U.S. company networks and deployed Ryuk ransomware, encrypting systems. Prosecutors noted attacks against a Michigan company that paid over $1.1 million in Bitcoin, a technology company in Oregon, and a school in Texas. The group received approximately 1,610 bitcoins in ransom payments, valued at around $15 million at the time. The Ryuk operation, active from 2018 to mid-2020, targeted numerous sectors, including healthcare. Many Ryuk members later joined the Conti ransomware operation. Vardanyan faces up to 15 years in prison and has agreed to pay over $1.1 million in restitution. He is scheduled for sentencing in September 2026. Source: Bleeping Computer An In-Depth Guide to Ransomware Get essential knowledge and practical strategies to protect your organization from ransomware attacks. Learn More SC Staff Related Breach Miinto customer data accessed in security incident SC Staff July 10, 2026 The breach, which Miinto reported to the police and data protection authorities, may have compromised customer names, email addresses, physical addresses, and phone numbers. Ransomware Former ransomware negotiator sentenced to 70 months for extorting $75.3 million SC Staff July 10, 2026 Angelo John Martino III, a former ransomware negotiator for DigitalMint, was sentenced to 70 months in jail for deceiving his employer’s clients and conspiring with ransomware affiliates to extort a combined $75.3 million from five U.S. companies. Ransomware ‘GodDamn’ ransomware deploys PoisonX driver to kill EDR Laura French July 10, 2026 GodDamn, a rebrand of Beast and Monster ransomware, leverages AnyDesk for remote access. Related Events Cybercast Ransomware reloaded: Finding resilience when attackers wield AI On-Demand Event Virtual Conference Ransomware Resilience: Strategies to Defend, Mitigate, and Recover On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds