Conti Developer Pleads Guilty for Role in Global Ransomware Campaign

Ukrainian national Oleksii Oleksiyovych Lytvynenko pleaded guilty in U.S. federal court to conspiracy to commit wire fraud for his role in the Conti ransomware operation, one of the most prolific cybercrime campaigns tracked by U.S. authorities. Prosecutors said Lytvynenko joined Conti by September 2021, helped develop a malware loader used to gain initial access to victim networks, and possessed data stolen from 12 victims, including eight in the United States. He was arrested in Ireland in July 2023, extradited to the United States in October 2025, and now faces up to 20 years in prison, with sentencing scheduled for September 2026.

The Justice Department said Conti targeted more than 1,000 victims across 47 U.S. states, Puerto Rico, Washington, D.C., and about 31 countries, extorting more than $150 million in ransom payments. In one part of the case, prosecutors said Lytvynenko and co-conspirators collected about $634,000 in Bitcoin from two Tennessee victims and leaked stolen data from another Tennessee organization after a $3 million ransom demand was rejected. The plea comes as U.S. authorities continue pursuing other alleged Conti members; earlier indictments also tied the group’s breakup to successor operations including Black Basta, Quantum, Royal, and BlackSuit.