Skip to content
NewA calmer, faster ZeroHour
StoryPolicy & legalinfo

Hive and Nefilim affiliate Artem Stryzhak sentenced to 70 months

8 sources · 8 articlesFirst reported Updated ()1
What's new

October 28: Security Affairs says the Eastern District of New York in Brooklyn imposed the sentence and describes a plea covering fraud, extortion and related computer activity, with Stryzhak keeping 80 percent of ransoms.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

A Brooklyn court sentenced Artem Stryzhak to 70 months; co-conspirator Volodymyr Tymoshchuk remains at large.

A Brooklyn federal court sentenced Ukrainian national Artem Aleksandrovych Stryzhak, 36, who lived in Barcelona, to 70 months after a December 2025 guilty plea tied to Nefilim and Hive ransomware. Prosecutors say he was a Nefilim affiliate from about June to October 2021, paid administrators including Volodymyr Tymoshchuk 20 percent of ransoms, and later deployed Hive against seven victims, including healthcare providers during COVID-19. The FBI says the groups caused more than $100 million in losses. He was arrested in Spain in June 2024 and extradited in April 2025. Most outlets put the reward for Tymoshchuk at up to $11 million; SecurityWeek reports $10 million. CyberScoop dates his activity from mid-2018 to late 2021, while others focus on 2021–2023.

Key facts
  • Pleaded guilty in December 2025 to computer-fraud conspiracy counts.
  • Nefilim targets favored US, Canada and Australia firms above $100 million revenue.
  • Hive period cited as about June 2021 through January 2023.
  • The FBI supplied a decryption key to one of his Hive victims.
  • Extradited from Spain on April 30, 2025, BleepingComputer reports.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Jun 1, 2021Began Nefilim affiliate work; oil-and-gas data stolen · DataBreaches.net
  2. Oct 1, 2021Nefilim affiliate period ended; Hive work followed · The Record
  3. Jan 1, 2023Cited end of Hive’s roughly 1,500-victim campaign · Help Net Security
  4. Jun 1, 2024Spanish authorities arrested Stryzhak · CyberScoop
  5. Apr 30, 2025Extradited from Spain to the United States · BleepingComputer
  6. Dec 1, 2025Pleaded guilty to ransomware-related conspiracy counts · The Record

What each outlet adds

beyond the shared facts
  • The RecordHive encrypted thousands of victims across 80 countries; separate $15 million Hive reward.
  • SecurityWeekPuts the Tymoshchuk reward at up to $10 million, not $11 million.
  • The RegisterSays target-revenue guidance rose from over $100 million to over $200 million.
  • CyberScoopDates his attacks from mid-2018 through late 2021 and cites about 1,500 group victims.
  • Security AffairsNames the Brooklyn federal court and an 80 percent ransom share kept by Stryzhak.
Threat actors
NefilimHiveLockerGogaMegaCortex
Malware
NefilimHiveLockerGogaMegaCortex
Organizations
FBIUS Department of StateU.S. Department of JusticeUS Department of JusticeUS State DepartmentUS Justice DepartmentDepartment of JusticeU.S. Attorney’s Office for the Eastern District of New York
Countries
UkraineUnited StatesSpainCanadaAustraliaNorwayFranceSwitzerlandGermanyNetherlands

Coverage

oldest first · one row per article · UTC
  1. · 3d ago CyberScoopFirst report

    Nefilim and Hive affiliate Artem Stryzhak sentenced to 70 months

    He pleaded guilty after extradition from Spain for attacks from 2018 through 2021; prosecutors still seek co-conspirator Volodymyr Tymoshchuk.

  2. · 3d ago The Record

    Nefilim and Hive affiliate sentenced to 70 months

    Artem Stryzhak pleaded guilty in December 2025; the FBI says the groups caused more than $100 million in losses.

  3. · 2d ago BleepingComputer

    Nefilim and Hive ransomware affiliate sentenced to 70 months

    Artem Stryzhak pleaded guilty after attacks on hospitals and large firms; an alleged accomplice remains at large.

  4. · 2d ago DataBreaches.net

    Ukrainian Nefilim and Hive affiliate sentenced to 70 months

    Artem Stryzhak, 36, pleaded guilty in December 2025 after extradition from Spain; co-conspirator Tymoshchuk remains sought.

  5. · 2d ago Help Net Security

    Nefilim and Hive affiliate Artem Stryzhak sentenced to nearly six years

    The State Department is offering up to $11 million for co-conspirator Volodymyr Tymoshchuk; Hive hit about 1,500 victims worldwide.

  6. · 2d ago SecurityWeek

    Ukrainian Hive and Nefilim affiliate sentenced to 70 months

    Artem Stryzhak deployed Nefilim in 2021 and Hive against seven organizations, including healthcare and law firms.

  7. · 2d ago The Register · Security

    Nefilim and Hive affiliate sentenced to 70 months in US

    Ukrainian Artem Stryzhak was arrested in Spain in June 2024, extradited in April 2025, and allegedly hit about seven Hive victims.

  8. · 2d ago Security Affairs

    Hive and Nefilim affiliate sentenced to 70 months in prison

    Artem Stryzhak pleaded guilty in December 2025; the FBI still offers up to $11 million for co-conspirator Volodymyr Tymoshchuk.