Key Operators of LockerGoga, MegaCortex, and Nefilim Ransomware Gangs Arrested

The U.S. District Court for the Eastern District of New York has charged Volodymyr Viktorovich Tymoshchuk, a Ukrainian national known as deadforz, Boba, msfv, and farnetwork, for his role in administering LockerGoga, MegaCortex, and Nefilim ransomware operations.

The indictment alleges that Tymoshchuk managed attacks against more than 250 companies in the U.S. and hundreds of organizations globally. These ransomware attacks caused severe disruption to business operations and led to significant financial losses.

Authorities say Tymoshchuk targeted high-profile American corporations, health care institutions, and major foreign industrial firms.

He threatened victims with data leaks if ransom payments were not made. When law enforcement developed decryption tools for earlier ransomware strains, Tymoshchuk switched to newer variants to avoid detection and remain effective.

Now, international coordination has uncovered and charged a dangerous ransomware actor who will face justice.

Ransomware Attacks, Law Enforcement Response, and Decryption Efforts

From December 2018 to October ...