Charges against Ukrainian admin of LockerGoga/MegaCortex/Nefilim ransomware

Event Details

Tymoshchuk (aka “deadforz/Boba”) allegedly acted as an administrator for the LockerGoga, MegaCortex, and Nefilim ransomware schemes that extorted 250+ U.S. companies and hundreds more worldwide. He and co-conspirators operated from 2018–2021, deploying new ransomware strains when older ones were decrypted. An international investigation (with Europol and authorities in multiple European countries) identified him. Decryption keys for LockerGoga/MegaCortex had been released to victims in 2022. Tymoshchuk is still on the run.

Date

09/09/2025

Ransomware Groups

Event Category

Level of Cooperation

Country

🇺🇸 United States

Thank you for signing up to our newsletter!

Thank you! RSVP received for Charges against Ukrainian admin of LockerGoga/MegaCortex/Nefilim ransomware

Charges against Ukrainian admin of LockerGoga/MegaCortex/Nefilim ransomware

Loading...

Loading…