Artem Aleksandrovych Stryzhak, a 35-year-old Ukrainian national, pleaded guilty to conspiracy to commit computer fraud linked to a series of ransomware attacks using the Nefilim malware. Operating from Barcelona, Spain, Stryzhak worked with others to target companies in the U.S., Canada, and Australia, particularly those with annual revenues exceeding $100 million. The attacks involved creating a unique ransomware file for each victim, along with a decryption key and a ransom note. If victims complied with the ransom demands, they received the decryption key to unlock their files. Stryzhak gained access to the Nefilim ransomware code in June 2021 after agreeing to share 20% of his ransom proceeds with the ransomware's administrators. He used an online platform to manage attacks and sought advice from co-conspirators about maintaining anonymity in case of law enforcement intervention. The scheme escalated when he was encouraged to target companies with over $200 million in revenue, and threats were made to publish stolen data on “Corporate Leaks” websites if ransoms weren't paid. Arrested in June 2024, Stryzhak was extradited to the U.S. on April 30 and is set to be sentenced on May 6, 2026. He faces up to 10 years in prison. Authorities are actively pursuing his co-conspirator, Volodymyr Tymoshchuk, offering a reward of up to $11 million for information leading to his arrest. The FBI is leading the investigation, with support from various law enforcement agencies. The case highlights ongoing efforts against cybercrime, with over 180 convictions secured by the U.S. Department of Justice since 2020.