---
title: DOJ: Ukrainian Nefilim and Hive ransomware affiliate Artem Stryzhak sentenced to 70 months; $11 million reward still out for Nefilim admin Volodymyr Tymoshchuk | ctxsec
url: https://ctxsec.com/items/doj-stryzhak-nefilim-hive-affiliate-sentenced-70-months
description: ""
status: "official (US Department of Justice, Oct 27)"
published: 2026-10-27
---

> 

[← Industry News](/industry) · [markdown](/items/doj-stryzhak-nefilim-hive-affiliate-sentenced-70-months.md)

official (US Department of Justice, Oct 27)

2026-10-27

### DOJ: Ukrainian Nefilim and Hive ransomware affiliate Artem Stryzhak sentenced to 70 months; $11 million reward still out for Nefilim admin Volodymyr Tymoshchuk

Artem Stryzhak, 36, formerly of Barcelona, was sentenced on Oct 27 to **70 months** in prison for conspiracy to commit computer fraud. Court documents say he joined **Nefilim** as an affiliate around June 2021, paying its administrators, including Volodymyr Tymoshchuk, 20% of ransoms, and stole data from an oil and gas transportation company that month. He was also one of the earliest **Hive** affiliates and deployed Hive against seven victims, including law firms, a dentist's office and a healthcare provider during COVID-19; the FBI gave one of his victims a decryption key.

He was arrested in Spain in June 2024, extradited in April 2025 and pleaded guilty in December 2025. The FBI says the groups he worked with caused more than $100 million in losses. The State Department's reward of up to **$11 million** for Tymoshchuk stands (tips: TymoTips@fbi.gov).

Sources: [DOJ Office of Public Affairs: Ukrainian national sentenced for role in ransomware conspiracies (Oct 27)](https://www.justice.gov/opa/pr/ukrainian-national-sentenced-role-hacking-hospitals-businesses-and-governments-part)