Ryuk Ransomware Operator Sentenced to Two Years in Prison

· Original article ↗

Summary

Karen Vardanyan was sentenced to two years in prison for his role in Ryuk ransomware attacks in 2019–2020. He pleaded guilty, and the sentence includes about $1.2 million in restitution to victims.

Key points

  • Vardanyan, an Armenian national, was sentenced to two years in prison and ordered to pay about $1.2 million in restitution.
  • He was extradited from Ukraine and pleaded guilty to computer fraud and conspiracy to commit fraud and extortion.
  • Victims included a Michigan company, an Oregon technology company and a Texas school.
  • Prosecutors said the group deployed Ryuk on hundreds of compromised servers and workstations between March 2019 and September 2020.
  • Justice Department officials said Vardanyan and his co-conspirators received about 1,160 bitcoins in ransom payments, valued at more than $15 million at the time.
  • His sentence will be followed by three years of supervised release; the article says his conviction will also have immigration consequences.

Article Details

Event Type
Criminal sentencing for involvement in Ryuk ransomware attacks
Impact
Karen Vardanyan was sentenced to two years in prison and ordered to pay about $1.2 million in restitution. Prosecutors said the group deployed Ryuk on hundreds of compromised systems from 2019 to 2020 and received about 1,160 bitcoins in ransom payments, valued at more than $15 million at the time.

MITRE ATT&CK

People

Threat Actors

Malware

Countries

Industries

Related Articles