Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

DOJ charges Tymoshchuk in LockerGoga/MegaCortex/Nefilim ransomware case

Law Enforcement
First reported
Last updated
Happening score
H score 35
1 unique sources, 1 articles

Summary

Hide ▲

The U.S. Department of Justice charged Volodymyr Viktorovich Tymoshchuk in a ransomware case, escalating criminal exposure around the LockerGoga, MegaCortex, and Nefilim operations. The case is tied to attacks that hit over 250 companies in the U.S. and worldwide and caused major operational disruption. It also carries a parallel $11 million reward effort aimed at his location, arrest, or conviction.

Related Happenings

U.S. sentencing of Deniss Zolotarjovs in Karakurt ransomware case

Law Enforcement
H score39 First: 05.05.2026 13:13 Last: 05.05.2026 13:13 Sources 1

About this happening: Deniss Zolotarjovs was sentenced to 8.5 years in prison in the United States for serving as a Karakurt ransomware negotiator, resolving a cross-border cybercrime c...

Open Happening

Tampa medical device company hit by ransomware attack linked to BlackCat (ALPHV)

Incident
H score45 First: 01.05.2026 10:47 Last: 01.05.2026 10:47 Sources 1

About this happening: A Tampa medical device company suffered a ransomware intrusion in May 2023 that encrypted its servers and triggered a $10 million ransom demand. The company later...

Open Happening

U.S. sentencing of Ryan Clifford Goldberg and Kevin Tyler Martin in BlackCat ransomware case

Law Enforcement
H score45 First: 01.05.2026 10:47 Last: 01.05.2026 10:47 Sources 1

About this happening: Ryan Clifford Goldberg and Kevin Tyler Martin, former employees of Sygnia and DigitalMint, were sentenced in a BlackCat (ALPHV) ransomware law-enforcement case...

Open Happening

Finnish arrest and U.S. charges in Bouquet Scattered Spider case

Law Enforcement
H score45 First: 28.04.2026 18:39 Last: 28.04.2026 18:39 Sources 1

About this happening: Finnish law enforcement arrested Bouquet, and U.S. federal prosecutors later charged him in a cross-border Scattered Spider cybercrime case. The charges include ...

Open Happening

BlackCat campaign expands across multiple victims

Campaign
H score39 First: 22.04.2026 14:00 Last: 22.04.2026 14:00 Sources 1

About this happening: The BlackCat ransomware operation ran a multi-victim extortion campaign against US organizations between April and November 2023, creating sustained ransom pressur...

Latest development: 01.05.2026 14:30

Ryan Goldberg and Kevin Martin were each sentenced to four years in prison for helping the BlackCat/ALPHV ransomware gang conduct attacks against multiple U.S. organizations during 2023. Prosecutors said the pair worked alongside Angelo Martino, paid BlackCat administrators a 20% share of ransom payments, and in one case received a Bitcoin ransom worth $1.2m while also leaking patient data from a healthcare victim.

Open Happening

Timeline

  1. 09.09.2025 19:08 2 articles · 10mo ago

    Initial report: DOJ charges Tymoshchuk in LockerGoga/MegaCortex/Nefilim ransomware case

    Initial Disclosure

    Federal prosecutors unsealed a superseding indictment charging Volodymyr Viktorovich Tymoshchuk over his alleged role in LockerGoga, MegaCortex, and Nefilim ransomware operations. The prosecution links the defendant to a long-running cybercrime thread that affected hundreds of companies and drew a large reward for locating or arresting him.

    Show sources
    Open in new tab