An Armenian citizen, Karen Vardanyan, aged 35, has been sentenced to prison by a United States court for his involvement in Ryuk ransomware attacks, as announced by the Justice Department this week.
Details of the Charges and Arrest
In February 2024, a grand jury in the United States charged Vardanyan with conspiracy, fraud, and computer-related extortion. His arrest took place in Ukraine in April 2025, followed by his extradition to the United States two months later. In July 2026, Vardanyan entered a guilty plea to charges of conspiracy and computer fraud.
He has now received a 24-month federal prison sentence, with an additional 3 years of supervised release afterward. Under federal law, the time he spent in pretrial detention is credited towards his sentence, meaning he has already served a significant part of the 24-month term since his extradition.
Involvement in Ryuk Ransomware Attacks
Authorities revealed that Vardanyan’s involvement in Ryuk ransomware attacks spanned from March 2019 to June 2020. While not a core member of the team that developed the malware, Vardanyan likely served as a ransomware affiliate or an initial access provider.
Through these attacks, he extorted over $1 million from various victims, and he has been ordered to pay more than $1.2 million in restitution to those affected.
Broader Context of Ransomware Sentencing
This sentencing is part of a broader crackdown on individuals involved in ransomware activities. Earlier this year, a Ukrainian developer of the Conti ransomware received a 4-year prison sentence in the US, while another Ukrainian linked to the creation of Lockergoga, MegaCortex, and Nefilim ransomware families was sentenced to 13 years by a Swiss court.
The Justice Department’s actions emphasize the ongoing international effort to combat cybercrime and bring perpetrators to justice. Such measures aim to deter future attacks and support the victims of these malicious activities.
Future Implications and Outlook
Vardanyan’s sentencing underscores the United States’ commitment to prosecuting cybercriminals, regardless of their nationality. As global cooperation against cyber threats strengthens, authorities hope to mitigate the impact of ransomware and protect potential victims from future attacks.
