Armenian Cybercriminal Sentenced to Two Years in U.S. Prison After Ukraine Extradition

A U.S. federal judge sentenced Karen Vardanyan, a 35-year‑old Armenian national identified online as "Maneeken" and occasionally as "Karl Lagerfeld," to 24 months in prison and ordered him to pay $1.2 million in restitution. The ruling follows Vardanyan's extradition from Ukraine, where he had been detained pending transfer to the United States.

Vardanyan was convicted for his role in the Ryuk ransomware operation, a criminal enterprise that has targeted hospitals, municipalities and other critical infrastructure for several years. Ryuk is known for deploying ransomware that encrypts victims' data and demands large payments, often in cryptocurrency, to restore access. Law‑enforcement agencies in the United States and abroad have linked the group to multiple high‑profile attacks that caused significant operational disruptions and financial losses.

The extradition of Vardanyan underscores growing cooperation between Ukrainian authorities and U.S. law‑enforcement partners. Ukraine has become a focal point for the transfer of individuals accused of cybercrime, reflecting both its strategic location and its willingness to assist in international investigations. The successful handover demonstrates that even when suspects evade capture by crossing borders, coordinated diplomatic and legal mechanisms can bring them to trial.

Restitution of $1.2 million reflects the estimated damages attributed to Vardanyan’s activities, though the exact breakdown of victim compensation was not disclosed. Restitution orders in cybercrime cases aim to recover funds for affected entities, but the process can be complex, involving the tracing of cryptocurrency payments and the liquidation of seized assets.

Legal experts note that the sentence, while relatively brief compared with some cyber‑related penalties, sends a clear message that participation in ransomware schemes carries tangible consequences. The case adds to a series of recent convictions targeting Ryuk affiliates and other ransomware operators, signaling intensified prosecutorial focus on dismantling these networks. Observers anticipate that continued international collaboration will further tighten the net around transnational cybercriminals, potentially leading to additional arrests and longer sentences in future cases.