Skip to content
Volodymyr Viktorovych Tymoshchuk

Volodymyr Viktorovych Tymoshchuk

www.fbi.gov • October 28, 2026

Conspiracy to Commit Fraud and Related Activity in Connection with Computers; Intentional Damage to a Protected Computer; Unauthorized Access to a Protected Computer; Transmitting a Threat to Disclose Confidential Information

on X X.com on Email Email

"Boba", "MSFV", "Deadforz", "Farnetwork", Volodymyr V. Tymoshchuk, Volodymyr Viktorovy Tymoshchuk

The United States Department of State’s Transnational Organized Crime Rewards Program is offering a reward of up to $10,000,000 for information leading to the arrest and/or conviction of Volodymyr Viktorovych Tymoshchuk, and up to $1,000,000 for information leading to the arrest and/or conviction of other key leaders of the Nefilim, LockerGoga, and MegaCortex Ransomware variants.

Tymoshchuk has ties to Poland, Romania, Moldova, Türkiye, Russia, and Belarus.

Volodymyr Viktorovych Tymoshchuk is an alleged ransomware administrator of at least three different ransomware variants. From December of 2018, through October of 2021, Tymoshchuk and his co-conspirators allegedly deployed LockerGoga, MegaCortex, and Nefilim ransomware, which compromised the computer networks of hundreds of companies around the world, including more than 250 companies in the United States, in order to extort ransom payments from the victim companies.

On May 7, 2024, a federal arrest warrant was issued for Tymoshchuk in the United States District Court, Eastern District of New York, Brooklyn, New York, after he was charged with two counts of Conspiracy to Commit Fraud and Related Activity in Connection with Computers; multiple counts of Intentional Damage to a Protected Computer; Unauthorized Access to a Protected Computer; and Transmitting a Threat to Disclose Confidential Information.

Field Offices: New York , Springfield

Submit an anonymous Tip online

Extracted Entities

Attack Types (1)

Ransomware Groups (1)