Nefilim Ransomware — Victims, Campaigns & Activity

Overview

Nefilim is a ransomware group conducting global campaigns against companies. Recent U.S. court actions show its operators and affiliates pleading guilty to conspiracy to deploy Nefilim ransomware against U.S. and international targets, illustrating the group's reach and the ongoing law enforcement response.

Related Threat Clusters

• Ukrainian National Pleads Guilty in Nefilim Ransomware Conspiracy

  Artem Aleksandrovych Stryzhak, a 35-year-old Ukrainian national residing in Barcelona, Spain, pleaded guilty to conspiracy charges related to the deployment of Nefilim ransomware. This ransomware targeted large U.S.…

  16 articles · Updated December 19, 2025

Recent Intelligence Reports

• Nefilim Ransomware Operator Pleads Guilty — Technadu · December 20, 2025
• Ukrainian National Pleads Guilty in Brooklyn Federal Court to Global Ransomware Conspiracy — Hoodline · December 20, 2025
• Ukrainian National Pleads Guilty to Conspiracy to Use Nefilim Ransomware to Attack Companies in the United States and Other Countries — Databreaches · December 20, 2025
• Ukrainian national pleads guilty to Nefilim ransomware attacks — Cyberscoop · December 19, 2025
• Ukrainian National Pleads Guilty to Conspiracy to Use Nefilim Ransomware to Attack ... — Justice · December 19, 2025

Related Entities