Ukrainian man pleads guilty in U.S. over role in Conti ransomware attacks

A Ukrainian national has pleaded guilty in the United States for helping carry out Conti ransomware attacks that hit victims in the U.S. and other countries. The Justice Department said Oleksii Lytvynenko admitted joining the Conti conspiracy in 2021, possessing data stolen from 12 victims, and helping code a loader, malware used to install tools needed for ransomware intrusions. Prosecutors say Conti targeted more than 1,000 victims worldwide and collected over $150 million before the group fragmented in 2022.
Why it matters: This matters because Conti was one of the most damaging ransomware groups of its era, and the case adds concrete attribution and operational detail defenders can use to understand how these attacks were carried out. It also shows continued law-enforcement pressure on the people behind major ransomware campaigns and their successor groups.

Sources

Ukrainian lawyer's second career as a Conti coder earns him 4 years behind bars
2026.09.11 97% relevant
This is a direct update on the same underlying case involving Oleksii Lytvynenko’s role in Conti ransomware, adding the sentencing outcome, his handle ('henry'), details that he worked on a malware loader, evidence of continued ransomware activity after Conti’s 2022 breakup, and victim-loss figures tied to his conduct.
Ukrainian hacker gets four years in US prison over Conti ransomware attacks
2026.09.11 98% relevant
This is a direct update on the same underlying case: the Ukrainian Conti member who previously pleaded guilty has now been sentenced to four years in U.S. prison, with added details on his role as a hacker and developer, the loader malware work, and victim scope.
Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison
Eduard Kovacs 2026.09.11 95% relevant
This updates the same underlying case by reporting that Oleksii Oleksiyovych Lytvynenko has now been sentenced to four years in prison after previously pleading guilty, and adds details on his role developing a malware loader and possession of stolen victim data.
Conti ransomware gang member sentenced to 4 years in prison
Sergiu Gatlan 2026.09.11 96% relevant
This article updates the same underlying case involving Ukrainian defendant Oleksii Lytvynenko, adding that he has now been sentenced to four years in prison after pleading guilty, and reiterating his role as both an intruder and malware loader developer in Conti attacks.
Ukrainian Man Pleads Guilty in US to Conti Ransomware Charges
Ionut Arghire 2026.06.15 99% relevant
This article is a direct report of the same event and adds specifics that Oleksii Oleksiyovych Lytvynenko admitted developing a loader for Conti, joined the operation in September 2021, possessed data from 12 victims including eight in the U.S., and faces sentencing on September 10, 2026.
Ukrainian national pleads guilty to role in Conti ransomware operation
Lawrence Abrams 2026.06.12 100% relevant
This article establishes a distinct tracked development centered on a guilty plea by a named Conti operator, rather than updating an existing story in the tracker about a different actor, breach, or takedown.
← Back to all stories