Conti Ransomware Operator Extradited to the United States

A Ukrainian national accused of participating in one of the most damaging ransomware campaigns in history has been extradited from Ireland to face charges in the United States.Oleksii Oleksiyovych Lytvynenko, 43, appeared in federal court in Tennessee following his transfer from Irish custody, where he had been held since his arrest in July 2023.Global Ransomware Campaign Targeted Over 1,000 VictimsAccording to federal prosecutors, Lytvynenko conspired with others to deploy Conti ransomware against victims worldwide between 2020 and June 2022.The operation attacked more than 1,000 victims across approximately 47 U.S. states, the District of Columbia, Puerto Rico, and 31 foreign countries.Court documents allege that the conspirators infiltrated computer networks, encrypted victim data, and demanded ransom payments to restore access while threatening to publicly release stolen information.The FBI estimates that Conti ransomware attacks generated at least $150 million in ransom payments by January 2022.The malware particularly targeted critical infrastructure, with 2021 data showing Conti was used against more critical infrastructure victims than any other ransomware variant that year.In Tennessee alone, the conspirators allegedly extorted over $500,000 in cryptocurrency from two victims and published stolen data from a third.Irish national police, An Garda Síochána, arrested Lytvynenko in July 2023 at the request of U.S. authorities.Court filings allege that Lytvynenko controlled data stolen from numerous Conti victims and played a direct role in creating ransom notes deployed on compromised systems.Prosecutors claim he remained active in cybercrime activities until just days before his arrest in Ireland.Following extended extradition proceedings, Lytvynenko was transferred to U.S. custody this month. He now faces charges of computer fraud conspiracy and wire fraud conspiracy.If convicted, he could receive a maximum sentence of five years for computer fraud conspiracy and 20 years for wire fraud conspiracy.The case represents part of a broader effort to dismantle the Conti ransomware network. In September 2023, federal prosecutors unsealed an indictment charging four other Conti conspirators in Tennessee.The tGoogle News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Based on reporting by GBHackers.