What is Ryuk and how does it work?

Ryuk is a ransomware-type malware that encrypts data on infected devices and demands payment for its recovery. It often spreads via phishing emails or vulnerabilities in corporate networks.

Which companies are most frequently targeted by Ryuk?

Ryuk typically attacks large organizations, including government agencies, hospitals, and corporations, where data is critical and ransom payments are more likely.

How can businesses protect against ransomware attacks?

Key protective measures include regular data backups, software updates, employee training on phishing recognition, and implementing multi-factor authentication.

← All news

Security

Hacker Pleads Guilty to Ryuk Ransomware Attacks: Faces Up to 15 Years in Prison

July 11, 2026

Photo: BleepingComputer

Quick answer

A 34-year-old Armenian national pleaded guilty in the US for cyberattacks using the Ryuk ransomware against American companies. He faces up to 15 years in prison for network breaches and extortion using malware.

A US court has concluded proceedings against a hacker linked to attacks using the Ryuk ransomware. A 34-year-old Armenian citizen pleaded guilty to breaching corporate networks of American companies and encrypting their data for extortion. According to prosecutors, his actions resulted in significant financial losses for the affected organizations.

Ryuk is one of the most notorious ransomware strains, actively used by cybercriminal groups since 2018. The malware spreads through phishing campaigns and vulnerabilities in network infrastructure, blocking access to critical data. Victims were often forced to pay ransoms in cryptocurrency to regain access.

The court sentenced the defendant to a potential term of up to 15 years in prison. This case serves as another example of the intensified global fight against cybercrime. Experts note that such verdicts may act as a deterrent for other participants in cybercriminal networks.

Common questions

What is Ryuk and how does it work?: Ryuk is a ransomware-type malware that encrypts data on infected devices and demands payment for its recovery. It often spreads via phishing emails or vulnerabilities in corporate networks.
Which companies are most frequently targeted by Ryuk?: Ryuk typically attacks large organizations, including government agencies, hospitals, and corporations, where data is critical and ransom payments are more likely.
How can businesses protect against ransomware attacks?: Key protective measures include regular data backups, software updates, employee training on phishing recognition, and implementing multi-factor authentication.

Dzen feed: /feed/dzen.xml · RSS: /feed.xml