Ukrainian Man Pleads Guilty to Role in Conti Ransomware Operation
Summary
Oleksii Lytvynenko pleaded guilty in the U.S. to wire fraud conspiracy tied to Conti. He admitted joining the group and developing a malware loader; sentencing is scheduled for September 10, 2026.
Key points
- Oleksii Oleksiyovych Lytvynenko pleaded guilty to wire fraud conspiracy in a U.S. court.
- He admitted joining the Conti operation in September 2021 and working on a malware loader for the group.
- Lytvynenko admitted possessing data from 12 victims, including eight in the United States.
- He was arrested in Ireland in 2023 and extradited to the U.S. in October 2025; he faces up to 20 years in prison.
- Sentencing is scheduled for September 10, 2026.
- U.S. authorities believe he continued cybercriminal activity after Conti shut down.
Article Details
- Event Type
- Criminal prosecution: Oleksii Oleksiyovych Lytvynenko pleaded guilty in the United States to wire fraud conspiracy related to the Conti ransomware operation.
- Impact
- Lytvynenko admitted joining Conti in September 2021, helping develop a malware loader, and possessing data from 12 victims, including eight in the United States. Conti was used in attacks against more than 1,000 organizations between 2020 and 2022 and was estimated to have received at least $150 million in ransom payments by January 2022.
People
Threat Actors
ContiRansomware group Lytvynenko admitted joining and helping develop a malware loader for. The article says Conti was used in attacks against more than 1,000 organizations.Oleksii Oleksiyovych LytvynenkoOleksii Oleksiyovych Lytvynenko admitted in court to joining the Conti operation and working on a malware loader; he pleaded guilty to wire fraud conspiracy.Trickbot GroupThe article describes TrickBot as a malware family linked to the Conti operation and refers to a TrickBot gang.Vitaly Nikolaevich KovalevGerman authorities named him as the founder and leader of the TrickBot gang.
Malware
BazarLoaderThe Conti operation was linked to numerous other malware families, including TrickBot, which was also associated with Bazarloader, SystemBC, IcedID, Ryuk, and Diavol.ContiA Ukrainian national pleaded guilty in a US court to his role in the notorious Conti ransomware group, the Department of Justice announced.DiavolThe Conti operation was linked to numerous other malware families, including TrickBot, which was also associated with Bazarloader, SystemBC, IcedID, Ryuk, and Diavol.IcedIDThe Conti operation was linked to numerous other malware families, including TrickBot, which was also associated with Bazarloader, SystemBC, IcedID, Ryuk, and Diavol.RyukThe Conti operation was linked to numerous other malware families, including TrickBot, which was also associated with Bazarloader, SystemBC, IcedID, Ryuk, and Diavol.SystemBCThe Conti operation was linked to numerous other malware families, including TrickBot, which was also associated with Bazarloader, SystemBC, IcedID, Ryuk, and Diavol.TrickBotThe Conti operation was linked to numerous other malware families, including TrickBot, which was also associated with Bazarloader, SystemBC, IcedID, Ryuk, and Diavol.
Countries
IrelandThe man, Oleksii Oleksiyovych Lytvynenko, 44, of Cork, Ireland, was arrested in Ireland in 2023 and was extradited to the US in October 2025 to face Conti-related charges.United StatesThe man, Oleksii Oleksiyovych Lytvynenko, 44, of Cork, Ireland, was arrested in Ireland in 2023 and was extradited to the US in October 2025 to face Conti-related charges.