Ryuk Ransomware Actor Sentenced to 2 Years

An Armenian national has been sentenced to 24 months in prison and three years of supervised release for his role in Ryuk ransomware attacks that targeted and encrypted the systems of U.S. companies. The sentencing took place on June 12, 2024, following his guilty plea to conspiracy to commit wire fraud and damage to protected computers. The individual, identified as Edvard Hovhannisyan, aged 33, was apprehended in Armenia in November 2023 and subsequently extradited to the United States. His involvement in the Ryuk ransomware operation spanned from at least May 2019 to October 2021. During this period, Hovhannisyan and his co-conspirators engaged in a sophisticated scheme to deploy the Ryuk ransomware, a type of malicious software designed to lock down computer systems and demand payment, typically in cryptocurrency, for their restoration. The attacks aimed to disrupt the operations of numerous businesses across the United States, causing significant financial losses and operational downtime. The U.S. Department of Justice stated that Hovhannisyan played a key role in the technical aspects of the ransomware attacks, including the distribution and deployment of the malware. The Ryuk ransomware, known for its targeted nature and high ransom demands, has been responsible for some of the most damaging cyberattacks in recent years, affecting critical infrastructure, healthcare providers, and large corporations. The investigation and prosecution of Hovhannisyan were part of a broader international effort to dismantle cybercriminal organizations responsible for ransomware attacks. The U.S. Attorney for the Southern District of New York, Damian Williams, emphasized the government's commitment to prosecuting individuals involved in such disruptive cybercrimes. The sentencing serves as a warning to other cybercriminals that they will be held accountable for their actions, regardless of their location. The supervised release period will involve monitoring Hovhannisyan's activities to prevent any recurrence of criminal behavior. The case highlights the persistent threat posed by ransomware and the challenges in combating it, often involving cross-border cooperation between law enforcement agencies. The Ryuk ransomware group has been linked to numerous high-profile attacks, and its operators have been known to demand ransoms ranging from hundreds of thousands to millions of dollars. The successful prosecution of Hovhannisyan is a significant step in the ongoing efforts to disrupt the operations of this particular ransomware cartel and to bring its members to justice.