Ukrainian Conti ransomware member gets 4 years for hospital-linked attacks

 A Ukrainian national who helped deploy Conti ransomware against more than 1,000 victims worldwide has been sentenced to four years in prison for conspiracy to commit wire fraud.

Oleksii Oleksiyovych Lytvynenko, 44, formerly of Cork, Ireland, admitted to joining the Conti operation and coding a “loader” — malware used to deliver other malicious software onto compromised systems, according to a Sept. 10 U.S. Justice Department news release. He pleaded guilty June 10.

Conti attacked computers and networks in 47 states, the District of Columbia, Puerto Rico and 31 countries between 2020 and 2022, and the FBI estimates the group collected more than $150 million in ransom payments. Evidence from Mr. Lytvynenko’s online accounts showed he possessed data stolen from eight U.S. victims and four overseas victims. He was arrested in County Cork, Ireland, in July 2023.

“Lytvynenko joined that conspiracy as both an intruder and a developer — personally harming at least 12 companies, storing stolen data from victims, and helping build the malicious tools Conti used to extort and threaten communities,” said Assistant Attorney General A. Tysen Duva of the Justice Department’s Criminal Division.

Conti was among the most active ransomware groups targeting U.S. hospitals before disbanding in 2022, including a 2021 attack on San Diego-based Scripps Health. The FBI’s San Diego, Nashville and El Paso field offices and the U.S. Secret Service investigated the case.

https://www.beckershospitalreview.com/healthcare-information-technology/cybersecurity/ukrainian-conti-ransomware-member-gets-4-years-for-hospital-linked-attacks/