Nefilim and Hive ransomware affiliate sentenced to 70 months
Original title: Nefilim and Hive ransomware affiliate gets 70 months in prison
Artem Stryzhak pleaded guilty after attacks on hospitals and large firms; an alleged accomplice remains at large.
A Ukrainian national, Artem Stryzhak, was sentenced to 70 months after pleading guilty in December 2025 to computer fraud conspiracy tied to Nefilim and Hive ransomware. Prosecutors say he acted as a Nefilim affiliate from June to October 2021, paying for access and keys, and later encrypted systems at seven Hive victims, including a healthcare provider during the COVID-19 pandemic. The FBI said the groups disrupted patient care and caused more than $100 million in losses. The State Department offers up to $11 million for information leading to the arrest of alleged accomplice Volodymyr Tymoshchuk.
Unconfirmed: Tymoshchuk’s alleged administrator role is a charging claim; he has not been convicted and remains at large.
- Stryzhak was arrested in Spain in June 2024 and extradited on April 30, 2025.
- He targeted large firms in the US, Canada, and Australia with yearly revenue above $100 million.
- Nefilim admins threatened to publish stolen data on dark-web Corporate Leaks sites.
- Hive victims included a dentist’s office, law firms, and a healthcare provider.
- Tymoshchuk was charged in September over LockerGoga, MegaCortex, and Nefilim.
- Threat actors
- NefilimHiveLockerGogaMegaCortex
- Organizations
- FBIUS State DepartmentUS Justice Department
From the original article
2 min read at bleepingcomputer.com
A Ukrainian national was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and high-revenue businesses worldwide between 2018 and 2021. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.