# Ransomware affiliate jailed for Nefilim and Hive attacks

- URL: https://talkfuse.com/story/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles/
- Published: 2026-10-28T15:52:17+00:00
- Updated: 2026-10-28T16:20:24+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/cyber-crime/2026/10/28/serial-ransomware-crook-gets-70-months-behind-bars-for-nefilim-hive-roles/5306050
- Topics: Art, Culture, Cybersecurity, Health, Medicine, Technology

## Key points

- Ransomware affiliate Artem Stryzhak received a 70-month sentence.
- Prosecutors linked him to Nefilim and Hive attacks.
- US rewards of up to $11 million target key suspects.

## Summary

Artem Stryzhak has been sentenced by a New York federal court to 70 months in prison for working as an affiliate of the Nefilim and Hive ransomware operations. Prosecutors say he helped attack businesses and other victims, including during the COVID-19 pandemic; US authorities say the groups caused more than $100 million in damages.

Stryzhak allegedly joined Nefilim in 2021 and agreed to give its operators 20 per cent of ransom proceeds, with attacks aimed at wealthy companies in the US, Canada and Australia. He was also among Hive’s early affiliates and is accused of attacking about seven victims; one Ohio hospital paid roughly $1.7 million in Bitcoin. Spanish police arrested him in June 2024, and he was extradited to the US in April 2025; rewards of up to $11 million are available for information about alleged Nefilim operator Volodymyr Tymoshchuk and other suspects.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.