Conti Ransomware Operator Sentenced to Four Years in Prison
Summary
Oleksii Lytvynenko was sentenced to four years for his role as an intruder and developer in Conti ransomware attacks. He admitted to handling stolen victim data, sending ransom notes, and coding a loader.
Key points
- Lytvynenko admitted joining Conti in 2021 as both an intruder and a developer.
- He admitted to controlling stolen data from eight U.S. victims and four overseas victims and sending ransom notes.
- He coded a loader used to load software needed for Conti attacks.
- He pleaded guilty to conspiracy to commit wire fraud and was sentenced to four years in prison.
- The FBI estimated that Conti-related victim payouts exceeded $150 million by January 2022; court documents say the operation targeted more than 1,000 victims worldwide.
Article Details
- Event Type
- A Conti ransomware operation member was sentenced to four years in prison for his role in ransomware attacks.
- Impact
- Oleksii Oleksiyovych Lytvynenko admitted to acting as an intruder and developer, controlling stolen victim data, sending ransom notes, and coding a loader. The Conti operation targeted more than 1,000 victims worldwide; the FBI estimated victim payouts exceeded $150 million as of January 2022.
MITRE ATT&CK
People
A. Tysen DuvaAssistant Attorney General who commented on Lytvynenko's role in the Conti operation.Mikko HyppönenNamed as a speaker in the article's digital summit promotion.Oleksii Oleksiyovych LytvynenkoConti member who admitted to acting as an intruder and developer; sentenced to four years in prison.Vitaly Nikolaevich KovalevIdentified by Germany's BKA as the leader of the TrickBot and Conti cybercrime gangs; reported to use the alias Stern.
Threat Actors
Malware
BazarBackdoorConti evolved into a cybercrime syndicate that controlled multiple malware operations, including BazarBackdoor and TrickBot, and it shut down two years later, in 2022, after increased law enforcement pressure and leakedContiA Ukrainian national, Oleksii Oleksiyovych Lytvynenko, was sentenced to four years in prison for helping carry out Conti ransomware attacks between 2021 and 2022.Ryuk#ContiTrickBot#Conti
Countries
Germanyand TrickBot for attacks against over 900 victims worldwide, while the Federal Criminal Police Office of Germany (Bundeskriminalamt or BKA) doxed the leader of the TrickBot and Conti cybercrime gangs in May 2025,IrelandHe was extradited from Ireland after his 2023 arrest by An Garda SÃochána.United States44-year-old Oleksii Oleksiyovych Lytvynenko was arrested by the Irish national police (An Garda SÃochána) in July 2023 at the request of the United States and was extradited last year.