Armenian Hacker Extradited to U.S. After Ransomware Attacks on Tech Firms

An Armenian national has been extradited from Ukraine to the United States to face federal charges for his alleged involvement in a series of Ryuk ransomware attacks and an extortion conspiracy that targeted U.S. companies, including a technology firm in Oregon.

Karen Serobovich Vardanyan, 33, was extradited to the U.S. on June 18, 2025, and is charged with conspiracy, fraud in connection with computers, and extortion.

According to court documents, between March 2019 and September 2020, Vardanyan and his co-conspirators allegedly infiltrated the computer networks of numerous companies to deploy Ryuk ransomware.

This malicious software encrypts data on a victim’s system, rendering files inaccessible until a ransom is paid.

Armenian Hacker Extradited to U.S.

The conspiracy allegedly involved three other individuals. Levon Georgiyovych Avetisyan, 45, another Armenian national, faces similar charges and is currently the subject of a U.S. extradition request in France.

Two Ukrainian nationals, Oleg Nikolayevich Lyulyava, 53, and Andrii Leonydovich Prykhodchenko, 53, have also been charged but are not currently in custody.

The Ryuk ransomware has been a significant global threat, targeting thousands of victims across various sectors, including private industries, local municipalities, school districts, critical infrastructure, and healthcare providers.

These attacks have caused severe disruptions by restricting access to essential data and impacting communications.

As part of the scheme, the conspirators allegedly placed ransom notes on compromised computer systems, demanding payments in Bitcoin in exchange for decryption keys. The group is accused of extorting approximately 1,610 bitcoins from their victims, a sum valued at over $15 million at the time of the payments.

Vardanyan made his first appearance in a federal court on June 20, 2025, where he pleaded not guilty to the charges. He has been ordered detained pending a seven-day jury trial scheduled to begin on August 26, 2025.

If convicted, Vardanyan faces a maximum sentence of five years in federal prison, three years of supervised release, and a $250,000 fine for each count.

The case is being investigated by the FBI and prosecuted by Assistant U.S. Attorney for the District of Oregon, Katherine A. Rykken. The Justice Department’s Office of International Affairs played a crucial role in securing Vardanyan’s arrest and extradition, with significant assistance from Ukrainian authorities.

Officials emphasize that an indictment is merely an accusation, and the defendant is presumed innocent until proven guilty.

Boost detection, reduce alert fatigue, accelerate response; all with an interactive sandbox built for security teams -> Try ANY.RUN Now