Kiberjinoyatchilik
Ukrainalik Hive va Nefilim Ransomware Hamkori AQShda 70 Oy Qamoqqa Hukm Qilindi
Artem Stryjak Nefilim ransomware hujumlarida foydalanishda aybdor deb topilgach, 70 oy qamoq jazosiga hukm qilindi.
Muallif
Ionut Arghire
| 28-oktabr, 2026 (11:05 ET)
36 yoshli ukrainalik fuqaro AQShda Nefilim ransomware hujumlaridagi roli uchun qamoqqa hukm qilindi.
Barselonada yashab kelgan Artem Aleksandrovich Stryjak 2024-yil iyun oyida Ispaniyada hibsga olindi va 2025-yil aprel oyida AQShga ekstraditsiya qilindi. U 2025-yil dekabr oyida aybini tan oldi.
Sud hujjatlariga ko'ra, Stryjak 2021-yil iyun oyida Nefilim ransomware operatsiyasiga hamkor sifatida qo'shildi va AQSh hamda xorijdagi tashkilotlarga qarshi hujumlarda zararli dasturdan foydalandi.
Stryjak Nefilim ma'muri Volodymyr Tymoshchuk bilan jabrlanuvchilardan undirilgan to'lovning 20 foizini Nefilim ma'murlariga to'lashga kelishib oldi.
Ayblanuvchi 2021-yil iyunidan 2021-yil oktyabrigacha Nefilim ransomware hamkori sifatida faoliyat yuritdi. Uning jabrlanuvchilaridan biri neft va gaz transporti sohasidagi nomi oshkor etilmagan kompaniya edi.
Sudda taqdim etilgan hujjatlar shuni ham ko'rsatadiki, Stryjak 2021-yil iyunidan 2023-yil yanvarigacha butun dunyo bo'ylab 1500 dan ortiq jabrlanuvchini nishonga olgan Hive ransomware guruhiga qo'shilgan ilk hamkorlardan biri bo'lgan.
Hujjatlarda Stryjak Hive ransomware dasturini yetti jabrlanuvchi tashkilotga, jumladan stomatologiya idorasi, sog'liqni saqlash muassasasi va yuridik firmalarga qarshi ishlatgani ko'rsatilgan. Ba'zi jabrlanuvchilar to'lov to'lagan va kiberjinoyatchilar shifrlangan fayllarni tiklash uchun shifrni ochish kalitini taqdim etgan.
Stryjak kompyuter firibgarligini sodir etish maqsadida til biriktirish aybi bilan 70 oy qamoq jazosiga hukm qilindi.
"Artem Stryjak AQSh korxonalari va shifoxonalarini nishonga olish uchun bir nechta ransomware guruhlari bilan ishlagan sermahsul kiberjinoyatchidir. Bu guruhlar bemorlarni davolashni to'xtatib, 100 million dollardan ortiq zarar yetkazdi", — dedi FBI operatsiyalar direktori Brett Leatherman.
AQSh Davlat departamenti hali ham ozodlikda bo'lgan Tymoshchukni hibsga olish yoki sudlashga olib keladigan ma'lumot uchun 10 million dollargacha, u boshqargan ransomware guruhlari boshqa rahbarlari haqidagi ma'lumot uchun esa 1 million dollargacha mukofot taklif qilmoqda.
Bog'liq: Ransomware javob mutaxassisi ShinyHunters FBI xakerlik tekshiruvida hibsga olindi
Bog'liq: Soxta shifrni ochish vositalari ransomware tiklash sxemasida 11 million dollarlik qo'shimcha to'lovni yashirdi
Bog'liq: Qilin Ransomware gumondori Yaponiyada hibsga olindi, Germaniyaga ekstraditsiya qilindi
Bog'liq: Politsiya KillSec Ransomware tizimini yopdi, gumonlanuvchi o'smir rahbarni aniqladi
Yozgan: Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbir.
Kundalik axborot byulleteni
So'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlaridan xabardor bo'lish uchun SecurityWeek elektron pochta byulleteniga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Vendor kalitining sizib chiqishi Denver Health Plan a'zolarining 238 000 ta ma'lumotini xavf ostiga qo'ydi
- HPE tarmoq mahsulotlaridagi o'nlab muhim kamchiliklarni tuzatdi
- Tushunarsiz DreamHost hodisasi elektron pochta va FTP parollarini qayta o'rnatishga majbur qildi
- O'lik Popcorn Time yangilovchisi millionlab kompyuterlarni egallash xavfiga duchor qildi
- Genesys xakerligi ichki tizimlardan mijoz ma'lumotlarini fosh qildi
- 953 ta onlayn do'kon uzoq davom etgan zararli dastur kampaniyasida zararlangan
- Golland politsiyasi bank hisoblaridan 400 000 dollardan ortiq mablag'ni o'g'irlagan NFC relay hujumlari bo'yicha ikki kishini hibsga oldi
- Mythos 5 iyul hujumida haqiqiy dunyo zararini e'tiborsiz qoldirdi
So'nggi yangiliklar
- Upwind Security 3,8 milliard dollarlik bahoda 400 million dollar jalb qildi
- Chrome va Firefox yangilanishlari 200 dan ortiq zaiflikni tuzatdi
- Yuz millionlab qurilmalarda ishlatiladigan GoAhead veb-serverida TLS kamchiliklari topildi
- Xitoy bilan bog'liq xakerlar PHP2Shell orqali firewallarni ildizdan egallashmoqda
- EPICS tadqiqot muassasasi nazorat dasturida uzoq yashiringan kamchiliklar tuzatildi
- Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Biz baribir unga tayanamiz.
- Maxfiylikni boshqarish firmasi Infisical 40 million dollar jalb qilgach, 600 million dollarga baholandi
- Xakerlar yangi Oracle EBS zaifligini tekshirishni boshladi
Trendda
Node2Shell: Brotli kamchiligi Microsoft, Node.js, Python paketlarida tuzatishlarga sabab bo'ldi
Tailscale "Tailworm" kamchiliklarining muvofiqlashtirilmagan oshkor etilishidan so'ng tezda tuzatishlar chiqardi
PHP2Shell ekspluatatsiyasi tekshiruvlardan ishlaydigan shellarga o'tdi
Genesys xakerligi ichki tizimlardan mijoz ma'lumotlarini fosh qildi
iOS, macOS 27.2 286 ta xatoni tuzatdi; ekspluatatsiya qilingan kamchilik iOS 18 ga qayta qo'llandi
Kiberxavfsizlik muammosi yirik yangi Meksika shifoxonasini bemorlarni boshqa joyga yo'naltirishga va klinikalarni yopishga majbur qildi
Golland politsiyasi bank hisoblaridan 400 000 dollardan ortiq mablag'ni o'g'irlagan NFC relay hujumlari bo'yicha ikki kishini hibsga oldi
HPE tarmoq mahsulotlaridagi o'nlab muhim kamchiliklarni tuzatdi
Kundalik axborot byulleteni
So'nggi tahdidlar, tendentsiyalar va texnologiyalardan xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta byulleteniga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: Agentik pentesting kuchliroq CTEM dasturi uchun
4-noyabr, 2026
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Bu sessiyada agentik pentestingni o'rganing va CTEM dasturingizda uzluksiz ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 sammiti
10 va 11-noyabr, 2026
CISOlar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiruvchi masalalarni ko'rib chiqish uchun birlashtiramiz.
Ro'yxatdan o'ting
Harakatdagi odamlar
Quantum eMotion Ueyn Tiplni CTO etib tayinladi.
Gay Ellis NCC Group bosh direktori etib tayinlandi.
Noma Security Bobbi Shokerni CFO va Alberto Rodrigesni CCO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Biz baribir unga tayanamiz.
Deyarli har bir B2B bitimini nazorat qiladigan jarayon — yuboruvchining ishonmaydigan va qabul qiluvchining qabul qiladigan o'z-o'zini baholashidir. Nihoyat kompaniyalar o'rtasida ishonch uchun yaxshiroq asos paydo bo'ldi. (Sravish Sridhar)
Bu yaxshi: NetScaler nol kunlik zaifliklari yangi normal haqida bizga nima aytadi
Yaqinda Citrix NetScaler tuzatishlarining yana bir to'plami chiqarilishi mumkinligi uchun tuzatish quvurlarini tayyor saqlang. (Tod Beardsley)
Zamonaviy kiberhujumlarga qarshi kurashda kontekst shohdir
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyingi qadamni oldindan bilish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaifliklarni aniqlash va ekspluatatsiya qilishni tezlashtirgan sari, virtual tuzatish hali ham himoya chuqurligi va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Cybercrime
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.
By
Ionut Arghire
| October 28, 2026 (11:05 AM ET)
*
A 36-year-old Ukrainian national was sentenced to prison in the US for his role in Nefilim ransomware attacks.
The man, Artem Aleksandrovych Stryzhak, who had been living in Barcelona, was arrested in Spain in June 2024 and extradited to the US in April 2025. He pleaded guilty in December 2025.
According to court documents, Stryzhak joined the Nefilim ransomware operation as an affiliate in June 2021 and used the malware in attacks against organizations in the US and abroad.
Stryzhak agreed with Nefilim administrator Volodymyr Tymoshchuk to pay the Nefilim administrators 20% of the ransom proceeds extorted from victims.
The defendant operated as a Nefilim ransomware affiliate between June 2021 and October 2021. One of his victims was an unnamed company in the oil and gas transportation industry.
Documents presented in court also show that Stryzhak was one of the early affiliates to join the Hive ransomware group, which hit over 1,500 victims worldwide between June 2021 and January 2023.
Advertisement. Scroll to continue reading.
The documents show that Stryzhak used the Hive ransomware against seven victim organizations, including a dental office, a healthcare provider, and law firms. Some of the victims paid a ransom, and the cybercriminals provided a decryption key to recover the encrypted files.
Stryzhak was sentenced to 70 months in prison for conspiracy to commit computer fraud.
“Artem Stryzhak is a prolific cybercriminal who worked with multiple ransomware groups to target U.S. businesses and hospitals. These groups disrupted patient care and caused more than $100 million in losses,” FBI operations director Brett Leatherman said.
The US State Department is offering up to $10 million for information leading to the arrest or conviction of Tymoshchuk, who remains at large, and up to $1 million for information on other leaders of the ransomware groups he ran.
Related:Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Related:Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme
Related:Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany
Related:Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
- HPE Patches Dozens of Critical Flaws in Networking Products
- Unexplained DreamHost Incident Prompts Email, FTP Password Resets
- Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
- Genesys Hack Exposes Customer Data From Internal Systems
- 953 Online Stores Infected in Long-Lasting Malware Campaign
- Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
- Mythos 5 Ignored Real-World Harm in July Attack
Latest News
- Upwind Security Raises$400 Million at$3.8 Billion Valuation
- Chrome and Firefox Updates Patch Over 200 Vulnerabilities
- TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
- China-Linked Hackers Exploit PHP2Shell to Root Firewalls
- Long-Hidden Flaws Patched in EPICS Research Facility Control Software
- Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
- Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise
- Hackers Start Probing Fresh Oracle EBS Vulnerability
Trending
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
PHP2Shell Exploitation Moves From Probes to Working Shells
Genesys Hack Exposes Customer Data From Internal Systems
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics
Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts
HPE Patches Dozens of Critical Flaws in Networking Products
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Quantum eMotion has named Wayne Teeple as CTO.
Guy Ellis has been appointed CEO of NCC Group.
Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.
More People On The Move
Expert Insights
*
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)