Particle.news
Download on the App Store

Ukrainian Nefilim Ransomware Affiliate Pleads Guilty in U.S. Court

Prosecutors say he took a 20% cut in a ransomware-as-a-service scheme whose alleged administrator remains at large.

Overview

  • Artem Aleksandrovych Stryzhak pleaded guilty to one count of conspiracy to commit computer fraud and is scheduled to be sentenced on May 6, 2026, with a maximum penalty of 10 years in prison.
  • The plea concerns attacks on businesses in the United States, Norway, France, Switzerland, Germany and the Netherlands.
  • Stryzhak was arrested in Barcelona in June 2024 and extradited to the United States on April 30, 2025.
  • Court filings say he became a Nefilim affiliate in June 2021 for a 20% share of ransom payments, targeting large companies using tailored malware, decryption keys, and threats to publish stolen data on “Corporate Leaks” sites.
  • U.S. officials say alleged administrator Volodymyr Tymoshchuk remains at large with an offer of up to $11 million for information leading to his capture, and the operation has rebranded under names including Fusion, Milihpen, Gangbang, Nemty and Karma.