An Armenian national was sentenced to two years in U.S. federal prison after pleading guilty in July to charges related to multiple ransomware attacks.
Karen Vardanyan, 35, will also have three years of supervised release and will have to pay $1,219,106 in restitution to victims of the cyberattacks he launched. Vardanyan was extradited from Ukraine in July 2025 after being arrested in Kyiv.
Prosecutors accused Vardanyan of being a core member of the Ryuk ransomware gang, noting in court documents that he and his co-conspirators launched over 2,400 ransomware attacks on victims around the world, including state and local municipalities.
The attacks “severely disrupted these entities’ abilities to function by restricting access to data and impacting communications,” prosecutors said.
At the height of the COVID-19 pandemic in 2020, the FBI and several other U.S. agencies warned that Ryuk actors were heavily targeting hospitals across the country. Hospital chain Universal Health Services was hit with a Ryuk attack that ultimately cost the company $67 million.
The DOJ said Vardanyan and his team received at least $15 million in ransoms from their attacks over the years.
Vardanyan personally launched several ransomware attacks and extorted more than $1 million from victims before he was placed on an international wanted list by the FBI. He pleaded guilty on July 8 to conspiracy and fraud in connection with computers.
Ryuk was first detected in August 2018, and the malware has previously been linked to Russian cybercriminals. U.S. officials took down Ryuk’s money laundering operations and experts tied the ransomware gang to a Russian group that also manages the Trickbot malware.
Several other members of the group have been identified and arrested over the last three years, including another Armenian national, Levon Georgiyovych Avetisyan, and two Ukrainians — Oleg Nikolayevich Lyulyava and Andrii Leonydovich Prykhodchenko, both 53.
A Russian man pleaded guilty in 2023 in an Oregon federal court to laundering funds for Ryuk over the course of three years after he was accused of being a middleman for the group alongside 13 unnamed co-conspirators.
