A Ukrainian national, **Artem Stryzhak**, 36, has received a 70-month prison sentence after pleading guilty to charges related to his involvement with prominent ransomware gangs. Stryzhak, who operated from Barcelona, Spain, was an active participant in cyberattacks that crippled vital services. ### Involvement with Nefilim Ransomware During 2021, Stryzhak leveraged the **Nefilim** ransomware to launch attacks against organizations in the United States, Canada, and Australia. As an affiliate, he reportedly paid a 20% fee of all extorted ransoms to **Nefilim** administrators, including the still-at-large co-conspirator **Volodymyr Tymoshchuk**. ### Transition to Hive Ransomware Stryzhak later transitioned from **Nefilim** to the **Hive** ransomware gang, operating with them from October 2021 to January 2023. This period coincided with the height of the COVID-19 pandemic, during which **Hive** notoriously targeted hospitals, government agencies, and businesses. The group encrypted thousands of victims across 80 countries, accumulating millions in ransom payments. ### Impact on Critical Services Assistant FBI Director **Brett Leatherman** highlighted the severe consequences of Stryzhak's actions, stating, “These groups disrupted patient care and caused more than $100 million in losses.” Prosecutors cited one particularly egregious incident where a hospital was forced to cease accepting new patients during the pandemic due to a **Hive** ransomware attack. ### The FBI's Disruption of Hive The **Hive** ransomware gang's operations were ultimately dismantled by the FBI following a months-long infiltration operation. Stryzhak was apprehended in Spain in June 2024 and subsequently extradited to the U.S. last April. He pleaded guilty in December 2025 to two counts of conspiracy to commit fraud, extortion, and related computer activities. ### Ongoing Hunt for Co-Conspirators Assistant Attorney General **A. Tysen Duva** underscored the conclusion of a prolonged, multi-continental investigation. However, the hunt continues for **Volodymyr Tymoshchuk**, who is also accused of being an administrator for the **LockerGoga** and **MegaCortex** ransomware gangs. U.S. Attorney **Joseph Nocella Jr.** affirmed their commitment to capturing Tymoshchuk. The U.S. Department of Justice has offered substantial rewards for information leading to the capture of those involved: an $11 million reward for information on Tymoshchuk’s whereabouts and a $15 million reward for information concerning other members of **Hive**.