Threats · 3h ago

Stryzhak sentence leaves ransomware networks unresolved

The U.S. Department of Justice says Artem Stryzhak received a 70-month prison sentence for attacks using Nefilim and Hive ransomware after pleading guilty. The State Department is offering up to $11 million for information leading to the arrest, conviction, or location of alleged Nefilim administrator Volodymyr Tymoshchuk, who remains at large.

Court documents describe Stryzhak as an affiliate: he used Nefilim’s ransomware and agreed to pay its administrators 20% of ransom proceeds. He and co-conspirators also used Hive ransomware against seven victims, including law firms, a dental office, and a healthcare provider.

The sentence closes one prosecution, not the wider case against ransomware operators. For organizations targeted by Nefilim or Hive, it brings accountability after the attacks but does not establish that the wider networks have been dismantled or that their other operators are in custody.

Timeline

Sources

7 sources covering this story

Entities

Part of the PlainSec briefing for 2026-10-28

Editions

Related stories