Related Threat Clusters
-
EU Sanctions Vitaly Kovalev, Ransomware Leader of Trickbot Group
On July 14, 2026, the European Union, in coordination with the U.S. and U.K., sanctioned Vitaly Nikolayevich Kovalev, known as 'Stern,' a key figure in the Trickbot ransomware syndicate. Kovalev is linked to over $300…
4 articles · Updated July 15, 2026 -
Supply Chain Attack Compromises DAEMON Tools with Malicious Backdoor
A supply chain attack has compromised the DAEMON Tools software installers, which began on April 8, 2026. Kaspersky identified that these trojanized installers, signed with legitimate digital certificates, have affected…
26 articles · Updated May 5, 2026 -
Latvian Ransomware Negotiator Sentenced for $56 Million Cyber Extortion Scheme
Deniss Zolotarjovs, a 35-year-old Latvian national, was sentenced to 8.5 years in federal prison for his role in a ransomware organization linked to over 54 cyberattacks on various companies from June 2021 to August…
12 articles · Updated May 5, 2026 -
Ukrainian National Pleads Guilty in Conti Ransomware Case
Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national, pleaded guilty to conspiracy to commit wire fraud related to the Conti ransomware operation. This group was responsible for over 1,000 attacks…
17 articles · Updated June 12, 2026 -
Ukrainian National Extradited for Conti Ransomware Charges Facing 25 Years in Prison
Oleksii Oleksiyovych Lytvynenko, a 43-year-old Ukrainian national, has been extradited from Ireland to the United States on charges related to the Conti ransomware group. He allegedly controlled stolen data and sent…
2 articles · Updated October 31, 2025 -
Ukrainian Extradited to US for Role in Conti Ransomware Operation
Oleksii Lytvynenko, a 43-year-old Ukrainian national, has been extradited from Ireland to the United States to face charges related to the Conti ransomware operation. He is accused of participating in cybercrimes that…
4 articles · Updated November 4, 2025
Recent Intelligence Reports
- The EU sanctions "the most active ransomware operator in history" Stern, involved in over ... — Chaincatcher · July 15, 2026
- “Stern” Ransomware Operator Sanctioned by EU — Chainalysis · July 14, 2026
- Ukrainian national pleads guilty to role in Conti ransomware operation — Bleepingcomputer · June 12, 2026
- Ukrainian national pleads guilty to role in Conti ransomware operation — Bleepingcomputer · June 12, 2026
- Risky Bulletin: Extremely targeted supply chain attack hits DAEMON Tools — News.Risky.Biz · May 6, 2026
- U.S. court sentences Karakurt ransomware negotiator to 8.5 years — Securityaffairs.Co · May 5, 2026
- Latvian national sentenced for ransomware attacks run by former Conti leaders — Cyberscoop · May 5, 2026
- Man behind ransomware group targeting Tri-State sentenced to federal prison — Wcpo · May 5, 2026