Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
A Ryuk ransomware operator was sentenced to 2 years in prison for extorting over $1.2 million from victims.
An Armenian national, Karen Vardanyan, was sentenced to two years in U.S. federal prison for his role as a core member of the Ryuk ransomware gang. Prosecutors stated that Vardanyan and his co-conspirators launched over 2,400 ransomware attacks worldwide, including on state and local municipalities and the Universal Health Services hospital chain, receiving at least $15 million in ransoms. Vardanyan personally extorted over $1 million from victims. The Ryuk gang has been linked to Russian cybercriminals and the Trickbot malware, and several other members have been identified and arrested.
- Ryuk ransomware operator Karen Vardanyan sentenced to 2 years in U.S. prison.
- Vardanyan and co-conspirators launched over 2,400 attacks, extorting at least $15 million.
- The Ryuk group is linked to the Russian Trickbot malware operation.
- Universal Health Services suffered a $67 million loss from a Ryuk attack in 2020.
Full article394 words · extracted from therecord.media · click to collapse
An Armenian national was sentenced to two years in U.S. federal prison after pleading guilty in July to charges related to multiple ransomware attacks. Karen Vardanyan, 35, will also have three years of supervised release and will have to pay $1,219,106 in restitution to victims of the cyberattacks he launched. Vardanyan was extradited from Ukraine in July 2025 after being arrested in Kyiv. Prosecutors accused Vardanyan of being a core member of the Ryuk ransomware gang, noting in court documents that he and his co-conspirators launched over 2,400 ransomware attacks on victims around the world, including state and local municipalities. The attacks “severely disrupted these entities’ abilities to function by restricting access to data and impacting communications,” prosecutors said. At the height of the COVID-19 pandemic in 2020, the FBI and several other U.S. agencies warned that Ryuk actors were heavily targeting hospitals across the country. Hospital chain Universal Health Services was hit with a Ryuk attack that ultimately cost the company $67 million. The DOJ said Vardanyan and his team received at least $15 million in ransoms from their attacks over the years. Vardanyan personally launched several ransomware attacks and extorted more than $1 million from victims before he was placed on an international wanted list by the FBI. He pleaded guilty on July 8 to conspiracy and fraud in connection with computers. Ryuk was first detected in August 2018, and the malware has previously been linked to Russian cybercriminals. U.S. officials took down Ryuk’s money laundering operations and experts tied the ransomware gang to a Russian group that also manages the Trickbot malware. Several other members of the group have been identified and arrested over the last three years, including another Armenian national, Levon Georgiyovych Avetisyan, and two Ukrainians — Oleg Nikolayevich Lyulyava and Andrii Leonydovich Prykhodchenko, both 53. A Russian man pleaded guilty in 2023 in an Oregon federal court to laundering funds for Ryuk over the course of three years after he was accused of being a middleman for the group alongside 13 unnamed co-conspirators.
No previous article
No new articles
Jonathan Greig
is a Breaking News Reporter at Recorded Future News. Jonathan has worked across the globe as a journalist since 2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia. He previously covered cybersecurity at ZDNet and TechRepublic.