Conti Ransomware Developer Sentenced for Wire-Fraud Conspiracy

Ukrainian national Oleksii Oleksiyovych Lytvynenko received a four-year U.S. prison sentence after pleading guilty to conspiring to commit wire fraud through the Conti ransomware operation. Lytvynenko joined Conti in September 2021, developed malware, and possessed data stolen from 12 victims, including eight U.S. organizations. Prosecutors said he and his co-conspirators extorted about $634,000 in Bitcoin from two Tennessee victims; one intrusion disrupted a sheriff’s department, emergency medical services, and a police department.

The sentence follows broader U.S. prosecutions targeting the interconnected Trickbot and Conti ecosystems. Justice Department indictments allege that operators used Trickbot—an infostealer that infected millions of systems worldwide—to obtain access for Conti ransomware attacks against hospitals, schools, businesses, local governments, and public-safety agencies. Conti compromised more than 900 organizations globally before it disbanded in 2022, with former personnel subsequently linked to successor operations including Zeon, Black Basta, and the Quantum/Royal/BlackSuit lineage.