Conti Ransomware Developer Receives Four-Year US Prison Sentence

Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national, has been sentenced to four years in a United States prison for his involvement with the Conti ransomware gang.

Lytvynenko was arrested in Ireland in 2023 and extradited to the United States in late 2025. He pleaded guilty to wire fraud in June 2026, admitting to assisting the Conti group with the development of a malware loader and the possession of stolen data from victims.

Role in the Conti Ransomware Operation

During his guilty plea, Lytvynenko admitted to joining the cybercrime syndicate in September 2021. While investigators had initially suggested his involvement began in 2020, the plea clarified his specific timeline within the group.

Beyond the development of malware, investigators found stolen victim data in Lytvynenko’s possession, indicating he may have participated directly in the execution of ransomware attacks. Authorities also determined that Lytvynenko remained active in ransomware operations even after the primary Conti group was dismantled, continuing his activities until his arrest.

Impact of the Conti Group

The Conti ransomware operation is estimated to have extorted at least $150 million in ransom payments. The gang utilised a double-extortion model, encrypting files and threatening to leak sensitive information to pressure organisations into paying.

The group’s operations had a significant global footprint, targeting organisations in more than 30 countries, including the majority of US states.

The sentencing of Lytvynenko follows a recent wave of US prosecutions targeting ransomware actors. This includes the sentencing of Latvian national Deniss Zolotarjovs to 8.5 years for his role as a Karakurt ransomware negotiator, and the 16-year sentence recently handed to the Belarusian creator and administrator of the Ransom Cartel ransomware.