Cybercrime Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023. By Eduard Kovacs | September 11, 2026 (7:29 AM ET) Flipboard Reddit Whatsapp Whatsapp Email A United States court sentenced Ukrainian national Oleksii Oleksiyovych Lytvynenko to four years in prison this week for his role in the Conti ransomware operation. Lytvynenko, 44, was arrested in Ireland in 2023 and extradited to the United States in late 2025. He pleaded guilty to wire fraud in June 2026, admitting to helping the Conti group develop malware and possessing stolen victim data. He faced up to 20 years in prison. Authorities initially indicated that the Ukrainian man worked with the Conti group between 2020 and 2022, when the operation was shut down . However, at his guilty plea, Lytvynenko admitted joining the cybercrime gang in September 2021. Lytvynenko helped the group develop a malware loader, but investigators also found victim data in his possession, suggesting that he may have also participated in the actual ransomware attacks. Investigators determined that Lytvynenko remained involved in ransomware attacks even after the Conti operation ended, until his arrest. Advertisement. Scroll to continue reading. The Conti ransomware gang is estimated to have received at least $150 million in ransom payments after encrypting victims’ files and threatening to leak stolen information unless they paid up. Authorities said the hackers targeted organizations in more than 30 countries, including most US states. Lytvynenko’s sentencing comes just months after Latvian national Deniss Zolotarjovs was sentenced to 8.5 years in prison in the US for his role as a Karakurt ransomware negotiator. Last month, the US also announced that the Belarusian creator and administrator of the Ransom Cartel ransomware was sentenced to 16 years in prison . Related : Five Venezuelans Plead Guilty in US Court to ATM Jackpotting Related : Australia Arrests 2 Alleged TeamPCP Hackers Related : Party’s Over for Crypto Scammers Who Went on a Spending Spree After a $240 Million Bitcoin Theft Written By Eduard Kovacs Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering. Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Eduard Kovacs Widened Scan Turns Up Fourth Rogue Claude Cyber Incident Organizations Warned of Cisco Secure FMC Exploitation Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products Anthropic Details Response to Security Incidents, Unveils Enterprise Safeguards OpenAI’s Astra Crosses ‘Critical’ Cyber Threshold After Finding Zero-Days SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild Latest News Check Point Patches Critical VPN Vulnerabilities Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance Surfshark Systems Targeted by Hackers Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion PaperCut Flaws Exploited in AI-Powered Attacks Mandiant Founder Kevin Mandia Joins Amazon Board Cybersecurity M&A Roundup: 33 Deals Announced in August 2026 Anthropic Researcher Resigns With Warning About the Dangers of AI Development Trending Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Virtual Event: Attack Surface Management Summit 2026 September 16, 2026 Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs. Register Webinar: Minimum Viable Business: Can You Prove Your Organization Would Recover? September 2, 2026 In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk. Register People on the Move Zero Networks has named Yossi Dagan as Chief Financial Officer. Manifold has appointed Joe Sullivan to its Board of Directors. Patrick McKinney has joined Turing as Chief Information Security Officer. More People On The Move Expert Insights This Key Will Self-Destruct: An Open Standard for Revocable API Keys Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default. (Matt Honea) What the Hugging Face Incident Teaches Security Leaders About AI Agent Access Security teams must treat autonomous agents as highly privileged identities. (Etay Maor) The Future of AI-Driven Security Depends on Complete Data For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. (Danelle Au) The MFA Identity Trap: When Authentication Creates a False Sense of Security Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop. (Torsten George) Silent Patches Don’t Stop Attackers – They Blind Defenders Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk. (Tod Beardsley) Flipboard Reddit Whatsapp Whatsapp Email