A Notorious Ransomware Player Bites the Dust: Armenian National Pleads Guilty in Ryuk Attacks
Karen Serobovich Vardanyan, a 34-year-old Armenian national, has pleaded guilty to participating in a series of high-profile ransomware attacks involving the notorious Ryuk malware. Between November 2019 and April 2020, Vardanyan and his co-conspirators deployed Ryuk against three US-based organizations, extorting millions of dollars from victims who paid ransoms in Bitcoin.
Vardanyan’s guilty plea comes as a significant blow to the ransomware landscape, which saw thousands of victims worldwide, including hospitals, schools, and critical infrastructure, fall prey to Ryuk attacks. The malware, known for its brutal efficiency and crippling impact on organizations, was particularly prevalent between 2019 and 2020. Vardanyan’s own victims include a Michigan-based company that paid a staggering $1.2 million in ransom, as well as a Watsonville, Oregon-based technology firm and a Texas-based school.
So, how does Ryuk ransomware work? In simple terms, the malware spreads through compromised networks, encrypting files and demanding payment in Bitcoin for decryption keys. This extortion tactic has proven highly effective for attackers, with Vardanyan’s co-conspirators reportedly raking in over $15 million in ransom payments from victim companies.
The US Justice Department’s announcement of Vardanyan’s guilty plea serves as a reminder that law enforcement is actively working to disrupt and dismantle the cybercrime networks behind these devastating attacks. The case also highlights the consequences for those who choose to engage in this type of malicious activity, with Vardanyan facing up to 15 years in jail and paying nearly $1.2 million in restitution.
As organizations continue to grapple with the threat of ransomware, it’s essential to remember that prevention is key. Implementing robust security measures, such as regular backups and employee education on cybersecurity best practices, can significantly reduce the risk of falling victim to a Ryuk or similar attack. Moreover, staying informed about emerging threats and collaborating with law enforcement to bring perpetrators to justice are crucial steps in combating this global menace.
In practical terms, this case serves as a stark reminder that cybercrime has real-world consequences – not just for victims but also for those who engage in these activities. As Vardanyan’s guilty plea demonstrates, the risks of detection and prosecution far outweigh any potential gains from participating in ransomware attacks.
Source: CyberScoop — 2026-07-10