DOJ: Ukrainian Nefilim and Hive ransomware affiliate Artem Stryzhak sentenced to 70 months; $11 million reward still out for Nefilim admin Volodymyr Tymoshchuk
Artem Stryzhak, 36, formerly of Barcelona, was sentenced on Oct 27 to 70 months in prison for conspiracy to commit computer fraud. Court documents say he joined Nefilim as an affiliate around June 2021, paying its administrators, including Volodymyr Tymoshchuk, 20% of ransoms, and stole data from an oil and gas transportation company that month. He was also one of the earliest Hive affiliates and deployed Hive against seven victims, including law firms, a dentist's office and a healthcare provider during COVID-19; the FBI gave one of his victims a decryption key.
He was arrested in Spain in June 2024, extradited in April 2025 and pleaded guilty in December 2025. The FBI says the groups he worked with caused more than $100 million in losses. The State Department's reward of up to $11 million for Tymoshchuk stands (tips: [email protected]).