By visiting our site, you agree to our privacy policy regarding cookies, tracking statistics, etc.
Apply now for free support from our Cybersecurity Services Centre
Apply for free cybersecurity support
Attend the Ransomware Defence Summer Bootcamp in Amsterdam, June 2026
Attend our free summer bootcamp on ransomware defence
Enroll in the Foundations of Cybersecurity and AI online live course
Learn online about the foundations of cybersecurity and AI
Tymoshchuk (aka “deadforz/Boba”) allegedly acted as an administrator for the LockerGoga, MegaCortex, and Nefilim ransomware schemes that extorted 250+ U.S. companies and hundreds more worldwide. He and co-conspirators operated from 2018–2021, deploying new ransomware strains when older ones were decrypted. An international investigation (with Europol and authorities in multiple European countries) identified him. Decryption keys for LockerGoga/MegaCortex had been released to victims in 2022. Tymoshchuk is still on the run.