Ukrainian national pleads guilty to Nefilim ransomware attacks

Artem Stryzhak, a Ukrainian national, pleaded guilty for his role in a series of Nefilim ransomware attacks from mid‑2018 to late‑2021 that targeted high‑revenue companies across the U.S., Europe, Canada and Australia; the group conducted data theft and extortion by customizing ransomware binaries and creating unique ransom notes and decryption keys for victims. Authorities arrested and extradited Stryzhak in 2024, are seeking co-conspirator Volodymyr Tymoshchuk (with an $11 million reward announced), and say the campaign caused millions in losses to multiple industries.