CYBERSECURITYTRACKER
Permanent story citation

Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7388

As cited

Copy frozen at (site build).

ransomware

Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler

A Swiss court sentenced a 52-year-old Ukrainian man to 12 years and nine months in prison for developing LockerGoga, MegaCortex, and Nefilim ransomware used in attacks on companies including Stadler Rail, Meier Tobler, and Crealogix. The developer claimed the source code came from legitimate consulting work, but the court rejected this after finding extortion messages in his data. The sentence is not final and can be appealed; the mastermind, Volodymyr Tymoshchuk, remains at large with an $11 million bounty.

Why it matters: Organizations targeted by LockerGoga, MegaCortex, or Nefilim should note that developer accountability in European courts may complement FBI efforts to locate the operation's leaders and associates still evading capture.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ransomware

Swiss court sentences 52-year-old Ukrainian ransomware dev to nearly 13 years in the cooler

A Swiss court sentenced a 52-year-old Ukrainian man to 12 years and nine months in prison for developing LockerGoga, MegaCortex, and Nefilim ransomware used in attacks on companies including Stadler Rail, Meier Tobler, and Crealogix. The developer claimed the source code came from legitimate consulting work, but the court rejected this after finding extortion messages in his data. The sentence is not final and can be appealed; the mastermind, Volodymyr Tymoshchuk, remains at large with an $11 million bounty.

Why it matters: Organizations targeted by LockerGoga, MegaCortex, or Nefilim should note that developer accountability in European courts may complement FBI efforts to locate the operation's leaders and associates still evading capture.

Actorseverest
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary