[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Industry News · markdown

official (US Department of Justice, Oct 27)

DOJ: Ukrainian Nefilim and Hive ransomware affiliate Artem Stryzhak sentenced to 70 months; $11 million reward still out for Nefilim admin Volodymyr Tymoshchuk

Artem Stryzhak, 36, formerly of Barcelona, was sentenced on Oct 27 to 70 months in prison for conspiracy to commit computer fraud. Court documents say he joined Nefilim as an affiliate around June 2021, paying its administrators, including Volodymyr Tymoshchuk, 20% of ransoms, and stole data from an oil and gas transportation company that month. He was also one of the earliest Hive affiliates and deployed Hive against seven victims, including law firms, a dentist's office and a healthcare provider during COVID-19; the FBI gave one of his victims a decryption key.

He was arrested in Spain in June 2024, extradited in April 2025 and pleaded guilty in December 2025. The FBI says the groups he worked with caused more than $100 million in losses. The State Department's reward of up to $11 million for Tymoshchuk stands (tips: [email protected]).

Sources: DOJ Office of Public Affairs: Ukrainian national sentenced for role in ransomware conspiracies (Oct 27)