Swiss Court Sentences Ukrainian Ransomware Developer to 12 Years and Nine Months
Summary
A Swiss court sentenced a Ukrainian developer linked to LockerGoga, MegaCortex and Nefilim attacks to 12 years and nine months in prison. The appealable judgment also bars him from Switzerland for ten years.
Key points
- Zurich District Court found the man developed code for LockerGoga, MegaCortex and Nefilim and played a key role in attacks on Stadler Rail, Meier Tobler and Crealogix.
- The court rejected his claim that the source code found at his home came from consulting work; extortion messages were also found among his data.
- He denied knowing his software was being used for criminal purposes. The judgment is not final and can be appealed.
- The court linked him to the May 2020 ransomware attack on Stadler Rail; the company said the attack likely led to a data leak and involved an extortion attempt.
- US prosecutors describe Volodymyr Tymoshchuk as the mastermind behind the three ransomware operations. He remains on the FBI's most wanted list, with an $11 million reward offered.
Article Details
- Event Type
- Swiss criminal sentencing of a ransomware developer for developing code used in ransomware operations and participating in attacks.
- Impact
- The defendant received a prison sentence of 12 years and nine months and a ten-year ban from Switzerland. The court linked him to attacks involving Stadler Rail, Meier Tobler, and Crealogix. The judgment is not final and may be appealed. Stadler Rail reported that its 2020 attack most likely led to a data leak and involved an extortion attempt; the Nefilim ransom demand was reportedly $6 million.
People
Threat Actors
Malware
LockergogaA Swiss court has sentenced a 52-year-old Ukrainian ransomware developer to 12 years and nine months in prison for helping power LockerGoga, MegaCortex, and Nefilim operations.MegaCortexA Swiss court has sentenced a 52-year-old Ukrainian ransomware developer to 12 years and nine months in prison for helping power LockerGoga, MegaCortex, and Nefilim operations.NefilimA Swiss court has sentenced a 52-year-old Ukrainian ransomware developer to 12 years and nine months in prison for helping power LockerGoga, MegaCortex, and Nefilim operations.
Countries
Industries
HVACThe court also found that he played a key role in attacks on HVAC company Meier Tobler and software company Crealogix.railThe case is tied to attacks on Stadler Rail, Meier Tobler, and Crealogix, while alleged mastermind Volodymyr Tymoshchuk remains on the FBI’s most wanted list.SoftwareHe had been held in pretrial detention since October 2021 and consistently denied knowing that his software was being used for criminal purposes.