● Covered by 3 sources · 3 reportsMedium impact3 neutral
Ransomware Operator Sentenced to 70 Months for Attacks with Nefilim and Hive Groups
Key points
- Artem Stryzhak sentenced to 70 months in prison.
- Pleaded guilty to conspiracy to commit fraud and extortion.
- Operated as an affiliate for Nefilim and Hive ransomware groups.
- Attacks targeted hospitals, governments, and businesses globally.
- Artem Stryzhak was 35 years old.
- Artem Stryzhak was extradited to the US on April 30, 2025.
- Artem Stryzhak was arrested in Spain in June 2024.
- Ransomware attacks caused over $100 million in losses.
- Artem Stryzhak paid 20% of ransom payments for Nefilim access and decryption keys.
- Artem Stryzhak was active as a Nefilim affiliate until October 2021.
- Artem Stryzhak targeted corporations in the US, Canada, and Australia.
- Artem Stryzhak was 36 years old.
- Artem Stryzhak was living in Barcelona.
- Artem Stryzhak pleaded guilty in December 2025.
- Artem Stryzhak joined Nefilim in June 2021.
- Artem Stryzhak agreed with Nefilim administrator Volodymyr Tymoshchuk.
- One Nefilim victim was an oil and gas transportation company.
- Artem Stryzhak used Hive ransomware against seven organizations.
- Hive ransomware hit over 1,500 victims worldwide.
Sentence for Ransomware Involvement
Artem Stryzhak, a 36-year-old Ukrainian national, has been sentenced to 70 months in prison. This follows his guilty plea last year to two counts of conspiracy to commit fraud, extortion, and related computer activities. Stryzhak was involved in multiple cyberattacks against organizations in the U.S., Canada, and Australia.
Affiliation with Nefilim and Hive
While residing in Barcelona, Spain, Stryzhak operated as an affiliate of the Nefilim ransomware group throughout 2021. He paid Nefilim administrators, including co-conspirator Volodymyr Tymoshchuk, a 20% fee from ransoms collected. Stryzhak later joined the Hive ransomware gang, working with them from October 2021 to January 2023. The Hive group encrypted thousands of victims across 80 countries, generating millions in ransom payments.
Impact of Attacks
Stryzhak's activities with both groups led to significant disruption, particularly during the COVID-19 pandemic. Targeted entities included hospitals, government organizations, and businesses. Assistant FBI Director Brett Leatherman stated that these groups disrupted patient care and caused over $100 million in losses. One incident cited involved a hospital being unable to accept new patients due to a Hive ransomware attack.
Arrest and Extradition
Stryzhak was arrested in Spain in June 2024 and subsequently extradited in April of the same year. His sentencing concludes a multi-continent investigation into his participation in cyberattacks. Prosecutors continue to search for Volodymyr Tymoshchuk, who is also accused of being an administrator for LockerGoga and MegaCortex ransomware gangs. The DOJ has offered rewards for information leading to Tymoshchuk's capture and other Hive members.
Updates
- Artem Stryzhak was 36 years old.
- Artem Stryzhak was living in Barcelona.
- Artem Stryzhak pleaded guilty in December 2025.
- Artem Stryzhak joined Nefilim in June 2021.
- Artem Stryzhak agreed with Nefilim administrator Volodymyr Tymoshchuk.
- One Nefilim victim was an oil and gas transportation company.
- Artem Stryzhak used Hive ransomware against seven organizations.
- Hive ransomware hit over 1,500 victims worldwide.
- Artem Stryzhak was 35 years old.
- Artem Stryzhak was extradited to the US on April 30, 2025.
- Artem Stryzhak was arrested in Spain in June 2024.
- Ransomware attacks caused over $100 million in losses.
- Artem Stryzhak paid 20% of ransom payments for Nefilim access and decryption keys.
- Artem Stryzhak was active as a Nefilim affiliate until October 2021.
- Artem Stryzhak targeted corporations in the US, Canada, and Australia.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
A Ukrainian national, Artem Aleksandrovych Stryzhak, received a 70-month prison sentence in the US for his involvement as an affiliate in Nefilim and Hive ransomware operations. Stryzhak conducted attacks against organizations in the US and abroad, including healthcare providers and law firms, causing significant financial losses.
A Ukrainian national received a 70-month prison sentence for his involvement in Nefilim and Hive ransomware attacks that targeted hospitals, government entities, and businesses globally between 2018 and 2021. The individual, Artem Aleksandrovych Stryzhak, was extradited to the US after his arrest in Spain and pleaded guilty to computer fraud conspiracy charges.
Artem Stryzhak, a 36-year-old from Ukraine, received a 70-month prison sentence after pleading guilty to charges related to cyberattacks using Nefilim and Hive ransomware. Stryzhak targeted hospitals, government entities, and businesses in the U.S., Canada, and Australia, contributing to over $100 million in losses and disrupting critical services.