A Ukrainian national has pleaded guilty in the United States for helping carry out Conti ransomware attacks that hit victims in the U.S. and other countries. The Justice Department said Oleksii Lytvynenko admitted joining the Conti conspiracy in 2021, possessing data stolen from 12 victims, and helping code a loader, malware used to install tools needed for ransomware intrusions. Prosecutors say Conti targeted more than 1,000 victims worldwide and collected over $150 million before the group fragmented in 2022.
Why it matters: This matters because Conti was one of the most damaging ransomware groups of its era, and the case adds concrete attribution and operational detail defenders can use to understand how these attacks were carried out. It also shows continued law-enforcement pressure on the people behind major ransomware campaigns and their successor groups.
Ionut Arghire
2026.06.15
99% relevant
This article is a direct report of the same event and adds specifics that Oleksii Oleksiyovych Lytvynenko admitted developing a loader for Conti, joined the operation in September 2021, possessed data from 12 victims including eight in the U.S., and faces sentencing on September 10, 2026.
Lawrence Abrams
2026.06.12
100% relevant
This article establishes a distinct tracked development centered on a guilty plea by a named Conti operator, rather than updating an existing story in the tracker about a different actor, breach, or takedown.
← Back to all stories