Cyberscoop Ukrainian National Pleads Guilty in Conti Ransomware Case
Article Content
- •Lytvynenko pleaded guilty to conspiracy to commit wire fraud related to Conti ransomware.
- •The Conti group attacked over 1,000 organizations globally, extorting more than $150 million.
- •Lytvynenko faces up to 20 years in prison, with sentencing set for September 10, 2026.
Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national, pleaded guilty to conspiracy to commit wire fraud related to the Conti ransomware operation. This group was responsible for over 1,000 attacks worldwide, extorting more than $150 million in ransom payments from victims, including critical infrastructure and government entities in the U.S. Lytvynenko admitted to developing malware for Conti and possessing data from 12 victims, eight of which were based in the United States. He was arrested in Ireland in July 2023 and extradited to the U.S. in October 2025. His sentencing is scheduled for September 10, 2026, and he faces up to 20 years in prison. The Conti ransomware gang, which disbanded in 2022, was notorious for its large-scale attacks on various sectors, including healthcare and government.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (17)
Following this threat?
Track Black Basta and Trickbot in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Emerging EDR Killer Tool Targeting Ransomware Groups A new malicious tool, referred to as the EDR killer, is being actively used by at least eight ransomware groups, including Blacksuit and Medusa, to disable endpoint detection and response (EDR) solutions. This tool is believed to be an evolution of the EDRKillShifter developed by RansomHub, which allows ransomware… 
Phishing Attacks Exploit Microsoft Teams for Credential Theft In 2026, attackers increasingly impersonated IT support via Microsoft Teams to steal credentials and spread malware. Ontinue's report noted that 30% of monitored organizations experienced such impersonation attempts, with one in every 990 external contacts showing signs of fraud. The Shai-Hulud npm worm was identified…