Nefilim Ransomware Hacker Pleads Guilty: Global Enterprise Attacks Exposed

Last Updated: December 23, 2025By

Ukrainian Hacker Pleads Guilty in Major Ransomware Case

Welcome to a noteworthy update on cybersecurity. Recently, a 35-year-old Ukrainian man, Artem Aleksandrovych Stryzhak, admitted to computer fraud in New York. This revelation comes after a series of damaging ransomware attacks across several countries, including the United States, Canada, and Australia.

Captured last year in Barcelona, Stryzhak was extradited to the United States in April. His guilty plea highlights his involvement with the Nefilim ransomware. He was accused of launching attacks and agreeing to funnel 20% of extorted funds to the hackers behind Nefilim, showing the elaborate nature of these cyber operations.

The ramifications of his charges are significant, with a potential ten-year prison sentence looming. His sentencing is scheduled for May. The Nefilim group strategically targeted large enterprises with annual revenues surpassing $100 million, causing serious financial and operational disruptions.

Global Hunt for Additional Ransomware Suspect

The Justice Department isn’t stopping there. An $11 million reward is up for grabs for information leading to Volodymyr Tymoshchuk’s arrest. Tymoshchuk is wanted as one of Nefilim’s top figures, orchestrating attacks on various U.S. sectors such as aviation and energy.

Prosecutors believe Tymoshchuk was pivotal to these operations, deploying not only Nefilim but also other ransomware like LockerGoga and MegaCortex. His cyber onslaught reportedly affected hundreds of organizations, raking in damage totaling in millions.

One of his infamous targets was Norsk Hydro, a Norwegian aluminum giant, illustrating the far-reaching impact of these cyber threats. The DOJ is doubling down on its efforts to track down these perpetrators and safeguard digital spaces.

For more insights on cybersecurity issues, subscribe to our newsletter.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.

Get daily news in your inbox

The lastest on Hacks, ransomware attacks, post quantum security and more