CUTSIGNcutting for sign — daily OSINT threat read

Search — “Nefilim”

2 stories · 0 IoCs

Stories

P3

Ukrainian Hive and Nefilim ransomware affiliate Artem Stryzhak sentenced to 70 months in US prison

brief 2026-10-29quick readactor: Artem Aleksandrovych Stryzhak (Hive and Nefilim affiliate)malware: Hive; Nefilim

Artem Aleksandrovych Stryzhak, a Ukrainian national, was sentenced to 70 months in US prison for conspiracy to commit computer fraud tied to Nefilim and Hive ransomware affiliate activity. Court documents say he used Hive against seven victim organizations, including a dental office, a healthcare provider, and law firms, and used Nefilim against organizations in the US and abroad between June and October 2021. The sources describe no technical attack behaviors, indicators, or detection guidance, so hunters have no specific artifacts to look for from this story.

P3

Nefilim/Hive affiliate Artem Stryzhak sentenced to 70 months; administrator Tymoshchuk still at large

brief 2026-10-28quick readLowactor: Nefilimmalware: Nefilim

Ukrainian national Artem Stryzhak, a former Nefilim and later Hive ransomware affiliate, was sentenced to 70 months in prison after pleading guilty to conspiracy charges tied to attacks on hospitals, government entities and businesses in the US, Canada and Australia. The source reports Nefilim administrator Volodymyr Tymoshchuk, also accused of administering LockerGoga and MegaCortex, has evaded capture. No technical detection details are provided in the source; this is a legal outcome report.