Hive ransomware affiliate jailed, years after FBI infiltrated the gang’s systems
A Ukrainian man has been sentenced to 70 months in a US prison for his role in ransomware attacks against hospitals, government organizations, and businesses worldwide.
Stryzhak became an affiliate of the Nefilim ransomware group around June 2021, receiving an 80% cut of the ransoms he extorted.
Healthcare attacks
Stryzhak was also an early affiliate of the Hive ransomware-as-a-service operation, which particularly targeted healthcare organizations. The FBI later warned that Hive had extorted $100 million from businesses and organizations globally in just 18 months.
FBI infiltration
In January 2023, it was revealed that a multinational law enforcement operation had secretly penetrated Hive's infrastructure in July 2022, capturing decryption keys and passing them to victims. According to the DOJ, this operation saved corporate victims over $130 million in ransom payments.
Stryzhak was arrested in Barcelona in June 2024 and extradited to the United States, where he pleaded guilty. His sentencing in 2026 demonstrates that law enforcement is prepared to be patient in pursuing cybercriminals, as evidence does not disappear over time.
Related
