securityweek.comarticleUkrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
Artem Aleksandrovych Stryzhak, a 36-year-old Ukrainian, was sentenced in the US to 70 months for conspiracy to commit computer fraud over Nefilim and Hive ransomware attacks. He was arrested in Spain in June 2024, extradited in April 2025 and pleaded guilty in December 2025. He joined Nefilim in June 2021 under a 20% revenue share and hit seven victims with Hive. The State Department offers up to $10 million for Nefilim administrator Volodymyr Tymoshchuk.
TL;DR Ukrainian Nefilim and Hive ransomware affiliate gets 70 months in US prison; Nefilim admin Tymoshchuk remains at large with a $10M bounty.
Organisations named here
- Artem Aleksandrovych Stryzhak
- Brett Leatherman
- FBI
- Nefilim
- US State Department
- Volodymyr Tymoshchuk
Technologies named here
- Oil and gas transportation company, Nefilim victim
Techniques named here
- Ransomware-as-a-Service affiliate model
Threat actors named here
- Volodymyr Tymoshchuk
- Hive
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup