Conti ransomware developer gets 4 years in US prison

The U.S. Department of Justice, in a 10 September 2026 Office of Public Affairs release, said Oleksii Oleksiyovych Lytvynenko, 44, a Ukrainian national formerly of Cork, Ireland, was sentenced to four years in prison for conspiracy to commit wire fraud tied to Conti ransomware.

DOJ said Conti infected computers of more than 1,000 victims worldwide. Attacks spanned 47 U.S. states, 31 foreign countries, the District of Columbia, and Puerto Rico in the 2020 to 2022 window in the department's narrative. The FBI estimated victim payouts associated with Conti exceeded $150,000,000 as of January 2022.

Lytvynenko pleaded guilty to wire fraud conspiracy on 10 June. Evidence showed he possessed data stolen from eight U.S. victims and four overseas victims. He admitted joining a Conti team and being directed to code a "loader" malware component.

He was arrested in July 2023 in County Cork, Ireland. Forensic artifacts, DOJ said, showed ongoing ransomware involvement even after Conti wound down. Irish partners assisted the extradition.

The case was prosecuted in the Middle District of Tennessee by CCIPS and an assistant U.S. attorney. Separately, a September 2023 indictment charging four other Conti conspirators was unsealed there.

CyberScoop reported the same sentencing and said prosecutors found him asleep within reach of an open laptop running Cobalt Strike. It said he was extradited to the United States in October 2025. Conti as a brand wound down around 2022. The sentence is four years on the count he pleaded to, not news of a fresh Conti wave.

Some offers on this page may be paid placements or contain affiliate links.