Nefilim and Hive affiliate sentenced to 70 months
Original title: Nefilim, Hive ransomware operator given five-year-plus sentence after guilty plea
Artem Stryzhak pleaded guilty in December 2025; the FBI says the groups caused more than $100 million in losses.
Artem Stryzhak, 36, of Ukraine, was sentenced to 70 months after pleading guilty to two conspiracy counts tied to ransomware attacks on hospitals, governments and businesses. Living in Barcelona, he used Nefilim in 2021 against organizations in the United States, Canada and Australia and paid administrators, including Volodymyr Tymoshchuk, 20 percent of ransoms. He then worked with Hive from October 2021 to January 2023. He was arrested in Spain in June 2024 and extradited the following April. Prosecutors say Tymoshchuk remains at large.
Unconfirmed: Tymoshchuk’s role is alleged; he has not been captured, and the loss figure is attributed to the FBI.
- Hive encrypted thousands of victims across 80 countries, prosecutors said.
- One hospital could not accept new patients during the pandemic because of a Hive attack.
- The DOJ previously offered $11 million for information on Tymoshchuk.
- A separate $15 million reward covers information on other Hive members.
- Tymoshchuk is also accused of administering LockerGoga and MegaCortex.
Impact: Ransom encryption of hospitals, governments and businesses
- Organizations
- FBIDepartment of Justice
From the original article
2 min read at therecord.mediaUkrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.