Conti ransomware developer sentenced to four years in US prison

Ukrainian national Oleksii Lytvynenko has received a four-year US prison sentence for his role in Conti, the ransomware operation linked to more than $150 million in victim payments.

Key takeaways

• Oleksii Lytvynenko was sentenced to four years in prison for conspiracy to commit wire fraud tied to Conti ransomware
• He admitted to possessing stolen data from 12 victims and helping develop a malware loader
• Conti infected more than 1,000 victims worldwide and generated over $150 million in reported ransom payments
• Lytvynenko was arrested in Ireland in 2023 and extradited to the United States in 2025

Four-year sentence follows guilty plea

A Ukrainian national who helped in the Conti ransomware operation has been sentenced to four years in US federal prison. Oleksii Oleksiyovych Lytvynenko, 44, pleaded guilty in June to conspiracy to commit wire fraud after his extradition from Ireland to the United States in October last year.

Prosecutors said Lytvynenko joined the Conti conspiracy around September 2021. He admitted to possessing data stolen from eight US victims and four other victims overseas and working on code for a malware “loader,” a type of software designed to launch other malicious components during an attack.

Conti collected more than $150 million in ransoms

Conti grew into one of the most disruptive ransomware operations of its era. According to the US Department of Justice, the ransomware infected more than 1,000 victims worldwide between 2020 and 2022, affecting networks in 47 US states and 31 foreign countries.

The FBI estimated that Conti-linked victims had paid more than $150 million in ransoms by January 2022. Prosecutors have also tied the conspiracy to more than $500,000 in cryptocurrency extorted from two victims in Tennessee and the publication of data stolen from a third. Prosecutors also indicted four other alleged Conti conspirators in the same federal district in 2023.

Ransomware operators can be pursued across borders

Lytvynenko was arrested in County Cork, Ireland, in July 2023. DOJ said forensic evidence recovered at the time showed continued involvement in ransomware activity even after the original Conti operation had ended. Irish authorities later assisted with his extradition to the United States.

For consumers, ransomware remains a threat beyond headline-grabbing attacks on large organizations. Keep operating systems and applications patched, maintain offline or isolated backups, and avoid opening unexpected attachments or links. Bitdefender Ultimate Security adds real-time malware protection and multilayer anti-ransomware defenses, including safeguards designed to protect important files from unauthorized encryption.