‘764’ Extremist Group Leader Pleads Guilty to RICO, Child Exploitation Charges

Source: United States Department of Justice Criminal Division

A San Antonio-based member of the Nihilistic Violent Extremist (NVE) group 764 pleaded guilty today to racketeering activity and multiple acts relating to the sexual exploitation of children.

“The FBI will not rest when it comes to identifying and holding accountable those who prey on children and other vulnerable individuals,” said FBI Director Kash Patel. “The court documents show the defendant coerced minors to commit heinous and cruel acts of self-harm. Today’s guilty plea is a major step in seeing justice served in this case and demonstrates the FBI’s commitment to protecting the nation’s youth.”

“Chavez led a group of online predators whose ultimate purpose is to destroy our society.  They tried to achieve that heinous goal by desensitizing innocent children to violence—coercing them to perform gruesome and harmful acts against themselves and animals—with the hope of encouraging further violence and spreading chaos,” said Sue J. Bai, Principal Deputy Assistant Attorney General for National Security. “The National Security Division will continue to relentlessly investigate and prosecute predators who seek to terrorize our society by targeting our most vulnerable.”

“764 members, like the defendant, use the Internet to prey on vulnerable minors, coercing them to mutilate themselves, produce child exploitation images of themselves, and attempt suicide,” said U.S. Attorney Justin R. Simmons for the Western District of Texas. “My office will do everything legally possible to prosecute and imprison members of this group for as long as the law allows.”

According to court documents, Alexis Aldair Chavez, also known as Zack and Zack8884, 19, was an administrator and online leader of the ‘8884’ network, which is a network related to 764. Both 8884 and 764 are NVEs who engage in criminal conduct within the United States and engage with other extremists abroad. These NVEs share accelerationist goals that include social unrest and the downfall of the current world order, including the U.S. Government. Members of 8884 work in concert with one another towards a common purpose of destroying civilized society through the corruption and exploitation of vulnerable populations, including minors. NVEs engage in criminal conduct within the United States and abroad, in furtherance of political, social, or religious goals that derive primarily from a hatred of society at large and a desire to bring about its collapse by sowing indiscriminate chaos, destruction, and social instability. NVEs demand, coerce, and extort victims to engage in variety of violent conduct, including self-mutilation, online and in-person sexual acts, harm to animals, sexual exploitation of siblings and others, acts of violence, threats of violence, suicide, and murder.

In or about October 2023, Chavez and a co-conspirator attempted to have a minor female kill herself in a video chat by overdosing on pills. The two conspirators recorded the attempted suicide to obtain “content” that would allow them to maintain and increase their status in the 8884 enterprise. Approximately two months later, Chavez and the minor female victim worked together to coerce a female located overseas to get naked on camera, cut herself, and engage in sexual acts. They also extorted another female by forcing the victim to cut the name “Zack” into herself.

On or about Dec. 29, 2023, Chavez and a co-conspirator coerced another minor female to cut her tongue as well as torture and kill a cat on a live video call. That same month, Chavez and another co-conspirator worked together to groom and extort several other minor females. In one instance, the two conspirators coerced a female victim to light her arm on fire and have the fire burn through her skin and deeper into her body, while on a recorded video chat within the ‘8884’ channel. They groomed another minor female victim, forcing her to drink her own urine and attempt to overdose on unknown pills.

On or about Jan. 23, 2024, Chavez and a co-conspirator threatened and coerced a minor female victim to engage in sexually obscene activities and other egregious acts.

Chavez pleaded guilty to one count of racketeering, one count of distribution of child pornography, and one count of possession of child pornography. He faces up to 20 years in prison for each count, with a minimum of five years in prison for the distribution charge. A federal district court judge will determine any sentence after considering the U.S. Sentencing Guidelines and other statutory factors.

The FBI San Antonio Field Office is investigating the case with assistance from FBI Washington Field Office, Homeland Security Investigations, and the San Antonio Police Department.

Assistant U.S. Attorneys Mark Roomberg and Bill Harris for the Western District of Texas, and Trial Attorneys Justin Sher and James Donnelly of the National Security Division’s Counterterrorism Section are prosecuting the case.

The Justice Department remains vigilant against the threat of Nihilistic Violent Extremist (NVE) networks, like 764, that operate within the United States and around the globe. NVEs often target vulnerable individuals, including minors, using social media platforms to share CSAM and gore material, and groom victims toward committing acts of violence. Victims are often extorted, coerced, compelled, and blackmailed into complying with NVE demands, including self-mutilation, online and in-person sexual acts, harm to animals, sexual exploitation of siblings and others, acts of violence, threats of violence, suicide, and murder. For more information on how to protect children and others, read about the online risks here: Parents, Caregivers, Teachers — FBI and the FBI’s March 2025 public service announcement.

This case was brought as part of Project Safe Childhood, a nationwide initiative to combat the epidemic of child sexual exploitation and abuse launched in May 2006 by the Department of Justice. Led by United States Attorneys’ Offices and the Criminal Division’s Child Exploitation and Obscenity Section (CEOS), Project Safe Childhood marshals federal, state, and local resources to better locate, apprehend and prosecute individuals who exploit children via the Internet, as well as to identify and rescue victims. For more information about Project Safe Childhood, please visit www.justice.gov/psc.

Ukrainian National Pleads Guilty to Conspiracy to Use Nefilim Ransomware to Attack Companies in the United States and Other Countries

Source: United States Department of Justice

A Ukrainian national pleaded guilty today to one count of conspiracy to commit computer fraud for his role in a series of international ransomware attacks.

According to court documents, Artem Aleksandrovych Stryzhak, 35, of Barcelona, Spain, conspired with others to deploy the Nefilim ransomware against victim computer networks in the United States and other countries, causing significant damage to victim computer systems. As part of the scheme, the conspirators generated a unique ransomware executable file for each victim, along with a corresponding decryption key and customized ransom note. If a victim paid the ransom demand, the perpetrators provided the decryption key, enabling the victim to decrypt files locked by the ransomware.

In June 2021, Nefilim administrators gave Stryzhak access to the Nefilim ransomware code in exchange for 20 percent of his ransom proceeds. Stryzhak operated the ransomware through his account on the online Nefilim platform, known as the “panel.” Shortly after gaining access, Stryzhak asked a co‑conspirator whether he should choose a different username than one he used in other criminal activity, in case the panel “gets hacked into by the feds.”

Nefilim administrators preferred to target companies located in the United States, Canada, or Australia with annual revenues exceeding $100 million. Stryzhak and others researched potential victims after gaining unauthorized access to their networks, including by using online databases to obtain information about the companies’ net worth, size, and contact information. In or about July 2021, a Nefilim administrator encouraged Stryzhak to target companies in those countries with more than $200 million dollars in annual revenue. 

As part of the extortion scheme, the conspirators threatened that unless victims agreed to pay the ransom, the stolen data would be published on publicly accessible “Corporate Leaks” websites maintained by Nefilim administrators.

Stryzhak was arrested in Spain in June 2024 and extradited to the United States on April 30.

Stryzhak pleaded guilty to conspiracy to commit fraud related to computers in connection with his Nefilim ransomware activities. He is scheduled to be sentenced on May 6, 2026. The defendant faces a maximum penalty of 10 years in prison. A federal district court judge will determine any sentence after considering the U.S. Sentencing Guidelines and other statutory factors.

The U.S. Department of State’s Transnational Organized Crime (TOC) Rewards Program has offered a reward of up to $11 million for information leading to the arrest and/or conviction or location of Stryzhak’s charged co-conspirator, Volodymyr Tymoshchuk. Anyone with information about Tymoshchuk should contact the FBI via phone at +1-917-242-1407, by email at TymoTips@fbi.gov, by contacting your local field office, if in the United States, or by contacting the nearest U.S. Embassy, if located overseas. More information about the TOC reward offer is located on the State Department website.

The FBI Springfield Field Office in Illinois is investigating the case.

Trial Attorney Brian Z. Mund of the Criminal Division’s Computer Crime and Intellectual Property Section (CCIPS) and Assistant U.S. Attorneys Alexander F. Mindlin and Ellen H. Sise for the Eastern District of New York are prosecuting the case, with assistance from Paralegal Specialist Rebecca Roth of the Eastern District of New York. The Criminal Division’s Office of International Affairs, the FBI’s New York Field Office, and Spanish law enforcement authorities provided substantial assistance in this case.

CCIPS investigates and prosecutes cybercrime in coordination with domestic and international law enforcement agencies, often with assistance from the private sector. Since 2020, CCIPS has secured the conviction of over 180 cybercriminals, and court orders for the return of over $350 million in victim funds.

Justice Department Files Denaturalization Complaint against Bosnian War Persecutor Who Fraudulently Obtained U.S. Citizenship

Source: United States Department of Justice

Today, the Department of Justice filed a civil complaint to revoke the citizenship of Kemal Mrndzic, who failed to disclose during his immigration proceedings that he served as a guard at the notorious Čelebići prison camp during the Bosnian War. At Čelebići, prison guards subjected Bosnian-Serbs to beatings, torture, sexual assault, starvation, and murder.

“The allegations in this complaint demonstrate the value this Administration places upon both the integrity of its naturalization process and, more importantly, ensuring that those who persecute others based on protected bases, especially in war time, do not reap the benefits of refuge in the United States by gaming America’s immigration process,” said Assistant Attorney General Brett A. Shumate of the Justice Department’s Civil Division.

In October 2024, a federal jury found Mrndzic guilty of several criminal fraud and misrepresentation counts relating to his successful efforts to obtain a naturalization certificate and a U.S. passport. The jury’s guilty verdict established that Mrndzic falsified and misrepresented information material to his naturalization eligibility.

Among other facts, Mrndzic failed to disclose to immigration authorities the nature and timing of his military service during the Bosnian War. Specifically, he failed to disclose that he persecuted Bosnian-Serb inmates as a prison guard at Čelebići. Mrndzic’s 2024 conviction established his ineligibility to naturalize, as the Justice Department alleges in the naturalization revocation complaint.

This case is being civilly prosecuted by the Justice Department’s Office of Immigration Litigation, Affirmative Litigation Unit, after extensive investigation by ICE’s Homeland Security Investigations and criminal prosecution by the U.S. Attorney’s Office for the District of Massachusetts.

New Hampshire Man Pleads Guilty to Unlawful Delivery of a Firearm

Source: United States Department of Justice Criminal Division

BOSTON – A New Hampshire man pleaded guilty yesterday in federal court in Boston to unlawfully purchasing a semi-automatic pistol for an unlicensed individual. The unlicensed individual was later seen in online videos firing the pistol near a public school and was arrested in connection with a large-scale car theft enterprise.  

Maryland Man Indicted on Child Sexual Abuse Material Charges in Connection With Justice Department’s Operation Relentless Justice

Source: United States Department of Justice Criminal Division

Greenbelt, Maryland – The U.S. Attorney’s Office for the District of Maryland announced today, an indictment in connection with the Department of Justice’s Operation Relentless Justice, a coordinated enforcement effort to identify, track, and arrest child sex predators. This nationwide crackdown resulted in law enforcement locating more than 205 child victims and arresting more than 293 child sexual abuse offenders. 

Ukrainian National Pleads Guilty to Conspiracy to Use Ransomware

Source: United States Department of Justice Criminal Division

Earlier today, in federal court in Brooklyn, Artem Stryzhak pleaded guilty to conspiracy to commit fraud and related activity, including extortion, in connection with computers, for his role in a series of international ransomware attacks. Stryzhak, a Ukrainian citizen, was arrested in Spain in June 2024 and extradited to the United States on April 30, 2025.  

Former Eastside real estate broker convicted of real estate investment fraud scheme that stole more than $2 million from Washington victims

Source: United States Department of Justice Criminal Division

Seattle – A former real estate professional who operated a real estate investment fund was convicted late yesterday in U.S. District Court in Seattle of conspiracy to commit wire fraud and multiple counts of wire fraud, money laundering, and tax fraud, announced U.S. Attorney Charles Neil Floyd.