--- title: Serial ransomware crook gets 70 months behind bars for... description: A New York federal court sentenced Ukrainian national Artem Stryzhak to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware... canonical: https://daily.dev/posts/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles-o5hnwkvfm twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles | daily.dev og:description: A New York federal court sentenced Ukrainian national Artem Stryzhak to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware... og:url: https://daily.dev/posts/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles-o5hnwkvfm og:image: https://api.daily.dev/og/posts/o5HNwKVfM.png og:image:alt: Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles **[The Register](https://daily.dev/sources/theregister)** · 3 min read · 0 upvotes · 0 comments ## Summary A New York federal court sentenced Ukrainian national Artem Stryzhak to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware gangs. Prosecutors believe he began working with Nefilim around June 2021, while living in Barcelona, and agreed with alleged Nefilim boss Volodymyr Tymoshchuk to pay a 20 percent cut of ransom proceeds. He also signed up to Hive as one of its earliest affiliates and used its platform to attack approximately seven victims, and Hive's victims included an Ohio hospital that paid approximately $1.7 million in Bitcoin. Stryzhak was arrested by Spanish police in June 2024 and extradited to the US in April 2025. An FBI official described him as a prolific cybercriminal who played a role in groups responsible for more than $100 million in victim damages, and rewards totaling up to $11 million are available for information about Tymoshchuk and other key ransomware suspects. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What happened to the Hive ransomware gang's affiliates after law enforcement seized its infrastructure in 2023? Some affiliates are still being prosecuted years later. Ukrainian national Artem Stryzhak, an early Hive affiliate who attacked about seven victims, was arrested in Spain in June 2024, extradited to the US in April 2025, and sentenced to 70 months in prison for roles in both the Hive and Nefilim ransomware operations. _daily.dev keeps security teams current on ransomware group takedowns and prosecutions as they unfold._ ### How much money is being offered for information on the Nefilim ransomware boss Volodymyr Tymoshchuk? Rewards totaling up to $11 million are available for qualifying information about Tymoshchuk, the alleged operator behind the Nefilim ransomware-as-a-service operation, who remains at large. He allegedly directed affiliates like Artem Stryzhak to target US, Canadian, and Australian companies with over $200 million in annual revenue for a 20 percent cut of ransom proceeds. _Track ransomware enforcement developments and fugitive-boss cases on daily.dev as they develop._ ## Similar posts on daily.dev - [Ryuk ransomware member sentenced to 24 months in prison](https://daily.dev/posts/ryuk-ransomware-member-sentenced-to-24-months-in-prison-gx9jeagxv) · BleepingComputer · 0 upvotes · 0 comments - [Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler](https://daily.dev/posts/swiss-court-sentences-52-year-old-ukrainian-ransomware-dev-to-nearly-13-years-in-the-cooler-fuxyshnld) · The Register · 0 upvotes · 0 comments - [Ryuk ransomware member pleads guilty in the US, faces 15 years in prison](https://daily.dev/posts/ryuk-ransomware-member-pleads-guilty-in-the-us-faces-15-years-in-prison-catlfmize) · BleepingComputer · 1 upvotes · 0 comments - [DOJ says ransomware gang tapped into Russian government databases](https://daily.dev/posts/doj-says-ransomware-gang-tapped-into-russian-government-databases-hmfbviv8l) · TechCrunch · 0 upvotes · 0 comments --- Tags: [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles-o5hnwkvfm) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles","url":"https://daily.dev/posts/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles-o5hnwkvfm","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles-o5hnwkvfm"},"datePublished":"2026-10-28T15:53:12.309Z","dateModified":"2026-10-28T16:13:11.220Z","description":"A New York federal court sentenced Ukrainian national Artem Stryzhak to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dbcb029c31505aea06deafa2ad430273?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dbcb029c31505aea06deafa2ad430273?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles-o5hnwkvfm","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ransomware","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Serial ransomware crook gets 70 months behind bars for Nefilim, Hive roles"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles-o5hnwkvfm#faq","mainEntity":[{"@type":"Question","name":"What happened to the Hive ransomware gang's affiliates after law enforcement seized its infrastructure in 2023?","acceptedAnswer":{"@type":"Answer","text":"Some affiliates are still being prosecuted years later. Ukrainian national Artem Stryzhak, an early Hive affiliate who attacked about seven victims, was arrested in Spain in June 2024, extradited to the US in April 2025, and sentenced to 70 months in prison for roles in both the Hive and Nefilim ransomware operations. daily.dev keeps security teams current on ransomware group takedowns and prosecutions as they unfold."}},{"@type":"Question","name":"How much money is being offered for information on the Nefilim ransomware boss Volodymyr Tymoshchuk?","acceptedAnswer":{"@type":"Answer","text":"Rewards totaling up to $11 million are available for qualifying information about Tymoshchuk, the alleged operator behind the Nefilim ransomware-as-a-service operation, who remains at large. He allegedly directed affiliates like Artem Stryzhak to target US, Canadian, and Australian companies with over $200 million in annual revenue for a 20 percent cut of ransom proceeds. Track ransomware enforcement developments and fugitive-boss cases on daily.dev as they develop."}}]} ```