Armenian National Sentenced for Ryuk Ransomware Attacks

A US court has sentenced Karen Vardanyan, a 35-year-old Armenian national, to 24 months in federal prison for his involvement in Ryuk ransomware attacks.

In addition to the prison term, Vardanyan has been ordered to pay more than $1.2 million in restitution to victims. The sentencing follows a guilty plea in July 2026 to charges of conspiracy and computer fraud.

Role in Ryuk Operations

According to the US Department of Justice, Vardanyan was involved in Ryuk ransomware operations between March 2019 and June 2020. Authorities believe he likely operated as a ransomware affiliate or an initial access provider, rather than as a member of the team that developed the malware or managed the core infrastructure.

During his involvement, Vardanyan extorted more than $1 million from several victims through ransomware-driven extortion.

Extradition and Legal Proceedings

Vardanyan was charged by a US grand jury in February 2024. He was subsequently arrested in Ukraine in April 2025 and extradited to the United States in June 2025.

Under federal law, the time Vardanyan spent in pretrial detention will be credited toward his 24-month sentence. Following his prison term, he will serve three years of supervised release.

The sentencing is part of an ongoing legal crackdown on ransomware actors. Recent US enforcement actions have also resulted in prison sentences for developers associated with the Conti and Lockergoga ransomware families.