Two California Men Sentenced to Prison Terms for Conspiring to Launder the Proceeds of a Fraud From a Resident of New Jersey

Source: US FBI

NEWARK, N.J. – Two California men were sentenced to prison terms for conspiring to launder money that originated from internet-related fraud that targeted a law firm based in New Jersey and from fraudulently obtained loans from the U.S. Small Business Association, U.S. Attorney Alina Habba announced.

Eric Bullard, 62, of Los Angeles, California was sentenced to 37 months in prison, and Anthony Hannah, 61, of Moreno Valley, California, was sentenced to 33 months in prison.  Bullard and Hannah each previously pleaded guilty before U.S. District Judge Madeline Cox Arleo to informations charging them with conspiracy to commit money laundering.

According to documents filed in this case and statements made in court:

In June 2020, Victim-1 communicated via email with a law firm in New Jersey that was advising Victim-1, a resident of Bergen County, New Jersey, on a real estate transaction.  A business email compromise is a method of wire fraud often targeting businesses or individuals working on business transactions involving high-dollar wire transactions.  The fraud is carried out by compromising and/or “spoofing” legitimate email accounts through social engineering or computer intrusion techniques to cause employees of a target company, or other individuals involved in legitimate business transactions, to conduct unauthorized transfers of funds, most often to accounts controlled by the fraud perpetrators.

A co-conspirator conducted a business email compromise and sent an email to Victim-1 purporting to be on behalf of the law firm with fraudulent instructions to wire approximately $560,000 to a bank account controlled by Bullard.  Relying on the fraudulent instructions, Victim-1 wired approximately $560,000 into a bank account controlled by Bullard.  After receiving the funds, Bullard made several cash withdrawals and transferred money to other co-conspirators, including approximately $230,000 of the fraudulently obtained proceeds to an account controlled by Hannah.   

In addition to laundering proceeds from the business email compromise, Bullard and Hannah also obtained and laundered funds from the U.S. Small Business Administration’s (SBA) Economic Injury Disaster Loan (EIDL) program based on fraudulent loan applications. EIDL loans were intended to be for small businesses that were experiencing substantial financial disruption due to the COVID-19 pandemic.  In July 2020, Bullard received into a business bank account that he controlled approximately $143,100 from an SBA EDIL loan intended for a pharmacy company with a listed location in Colorado.  Hannah also received approximately $145,400 from the SBA for a loan intended for a pharmacy company with a listed location in Idaho.  Hannah then transferred approximately $51,395 to a bank account controlled by Bullard.

In addition to the prison terms, Judge Arleo sentenced Bullard and Hannah each to three years of supervised release and to pay $705,400 in restitution to the victims.  Judge Arleo ordered forfeiture of $611,395 for Bullard and $375,400 for Hannah, constituting proceeds derived from the conspiracy.

U.S. Attorney Habba credited special agents of the FBI Woodland Park Office, under the direction of Acting Special Agent in Charge Terence G. Reilly in Newark, with the investigation.

The government is represented by Assistant U.S. Attorney Farhana C. Melo of the Economic Crimes Unit in Newark.

The District of New Jersey COVID-19 Fraud Enforcement Strike Force is one of five strike forces established throughout the United States by the U.S. Department of Justice to investigate and prosecute COVID-19 fraud.  The strike forces focus on large-scale, multi-state pandemic relief fraud perpetrated by criminal organizations and transnational actors.  The strike forces are interagency law enforcement efforts, using prosecutor-led and data analyst-driven teams designed to identify and bring to justice those who stole pandemic relief funds.

Anyone with information about allegations of attempted fraud involving COVID-19 can report it by calling the Department of Justice’s National Center for Disaster Fraud Hotline at 866-720-5721 or via the NCDF Web Complaint Form at: https://www.justice.gov/disaster-fraud/ncdf-disaster-complaint-form.

                                                           ###

Defense counsel:
Bullard: Brandon Minde, Esq., Cranford, New Jersey
Hannah: Areeb Salim, Esq. Assistant Federal Public Defender, Newark

Hunterdon County Man Charged with Possession of Videos and Images of Child Sexual Abuse

Source: US FBI

TRENTON, N.J. – A Hunterdon County man was charged with possessing videos and images of child sexual abuse, U.S. Attorney Alina Habba announced.

David Tuytjens, 69, of Tewksbury Township, New Jersey, was charged in a one-count complaint with possession of child pornography. He had an initial appearance before U.S. Magistrate Judge Rukhsanah L. Singh in Trenton federal court and was detained.

According to documents filed in this case and statements made in court:

In December 2024, officers from the New Jersey State Parole Board visited Tuytjens’ residence and discovered various electronic devices, including a 64 gigabyte MicroSD storage card inside of a laptop. Officers conducted their visit because Tuytjens is prohibited from possessing, among other things, Internet-capable devices as an individual under Community Supervision for Life due to a prior State conviction. An examination of the storage card contents revealed at least 800 images and 30 video files containing child sexual abuse materials (“CSAM”). An ongoing review of the CSAM has revealed images depicting prepubescent minors engaged in sexually explicit conduct, images portraying sadistic or masochistic conduct, and sexual abuse or exploitation of an infant or toddler as further outlined in the complaint.

Due to Tuytjens’ prior convictions for aggravated sexual assault and possession of child pornography, the charge of possession of child pornography carries a statutory maximum penalty of 20 years in prison and a mandatory minimum penalty of 10 years in prison. The charge also carries with it a maximum $250,000 fine.

U.S. Attorney Habba credited special agents of the Child Exploitation and Human Trafficking Task Force in the Newark Office of the Federal Bureau of Investigation, under the direction of Acting Special Agent in Charge Terence G. Reilly, the New Jersey State Parole Board, under the direction of Chairman Samuel J. Plumeri, Jr., and the Hunterdon County Prosecutor’s Office, under the direction of Prosecutor Renée M. Robeson, with the investigation leading to the charge.

The government is represented by Special Assistant U.S. Attorney Jonathan S. Garelick of the U.S. Attorney’s Office Criminal Division in Trenton.

The charges and allegations contained in the complaint are merely accusations, and the defendant is presumed innocent unless and until proven guilty.

                                                                       ###

Defense counsel: Benjamin West, Esq., Assistant Federal Public Defender

Las Vegas Man Sentenced to Over 18 Years in Prison for Child Sexual Exploitation

Source: US FBI

LAS VEGAS – A Las Vegas resident was sentenced today by Chief United States District Judge Andrew P. Gordon to 18 years and 4 months in prison to be followed by 15 years of supervised release for sexually exploiting a child in his care, and possessing more than 2,000 files of child sexual abuse material (CSAM) depicting two children in his care and numerous other minors.

“The defendant engaged in a pattern of activity involving the sexual exploitation of a young girl within his supervisory control and possessed CSAM depicting two children in his custody,” said United States Attorney Sigal Chattah for the District of Nevada. “The defendant not only traumatized the children who trusted him, but he also possessed child sexual abuse material of additional victims. Let today’s sentencing be a deterrent to others like this defendant.”

“Exploiting young children and creating child sexual abuse material is among the most heinous crimes investigated by the FBI,” said Special Agent in Charge Spencer L. Evans for the FBI Las Vegas Division. “We remain steadfast in our commitment to seek justice for the victims of such predators. Today’s sentencing exemplifies the unwavering determination of the FBI and our partners to safeguard the most vulnerable members of our community.”

According to court documents, in December 2020, Daniel Lee Rhees messaged another Kik user that he sexually assaulted a six-year-old girl related to him. During the chats, Rhees stated that he formed a group of taboo parents and uses the Session platform as a place to chat and share CSAM. On December 16, 2020, investigators obtained a search warrant for Rhee’s residence and seized multiple devices belonging to him. During a forensic examination of the devices, investigators recovered CSAM of the six-year-old girl, and another four-year-old girl also related to Rhees. In total, Rhees possessed 1,803 images and 243 videos of child sexual abuse material.

Rhees pleaded guilty to one count of sexual exploitation of children and one count of possession of child pornography. In addition to imprisonment, under the Sex Offender Registration and Notification Act, Rhees must register as a sex offender and keep the registration current.

United States Attorney Sigal Chattah for the District of Nevada and Special Agent in Charge Spencer L. Evans for the FBI Las Vegas Division made the announcement.

The FBI and the Las Vegas Metropolitan Police Department investigated the case. Assistant United States Attorney Afroza Yeasmin prosecuted the case.

This case was brought as part of Project Safe Childhood, a nationwide initiative launched in May 2006 by the Justice Department to combat the growing epidemic of child sexual exploitation and abuse. For more information about Project Safe Childhood, please visit www.justice.gov/psc.

Anyone who has information about the physical or online exploitation of children are encouraged to call the FBI at 1-800-CALL-FBI (1-800-225-5324) or submit a tip online at tips.fbi.gov.

###

 

 

Southern Nevada Man Sentenced to 10 Years in Prison for Coercion and Enticement of a Child and Possession of Child Sexual Abuse Material

Source: US FBI

LAS VEGAS – A Henderson, Nev., resident was sentenced today by United States District Judge Gloria M. Navarro to 10 years in prison to be followed by 10 years of supervised release for engaging in a sexually explicit conversation with who he believed to be a child and possessing child sexual abuse material on his phone.

According to court documents, on April 5, 2023, Nathan Thomas Foreman (43) engaged in a sexually explicit conversation via text messaging with someone who he believed to be an 11-year-old girl in an attempt to meet her and engage in sexual intercourse. Throughout the course of the conversation, he inquired about her sexual preferences, requested photos, described what he wanted to do with her, and sent pornography depicting the sexual conduct he described in words. The conversation concluded with Foreman coordinating a time for the two to meet in person to engage in sexual intercourse. On April 6, 2023, Foreman was arrested at the predetermined meet up location. A forensic analysis of his cellphone revealed approximately 10 images and 12 videos of child sexual abuse material.

“The defendant not only attempted to coerce and entice who he believed to be an 11-year-old girl to engage in sexual intercourse with him, but he also possessed child sexual abuse material of infants and toddlers,” said United States Attorney Sigal Chattah for the District of Nevada. “Through the Justice Department’s Project Safe Childhood initiative, the U.S. Attorney’s Office, the FBI, and our law enforcement partners are continuously working to combat child sexual exploitation in Nevada.”

“When children are victimized, the FBI, along with our law enforcement partners, will exert every effort to ensure that perpetrators are held accountable,” said Special Agent in Charge Spencer L. Evans for the FBI Las Vegas Division. “Today’s sentencing reflects our unwavering commitment to pursuing justice for our most vulnerable victims.”

On October 1, 2024, Foreman pleaded guilty to one count of coercion and enticement and one count of possession of child pornography.

In addition to imprisonment, under the Sex Offender Registration and Notification Act, Foreman must register as a sex offender and keep the registration current.

The FBI investigated the case. Assistant United States Attorney Afroza Yeasmin prosecuted the case.

This case was brought as part of Project Safe Childhood, a nationwide initiative to combat the epidemic of child sexual exploitation and abuse launched in May 2006 by the Justice Department. Led by U.S. Attorneys’ Offices and the Child Exploitation and Obscenity Section, Project Safe Childhood marshals federal, state, and local resources to better locate, apprehend, and prosecute individuals who exploit children via the internet, as well as to identify and rescue victims. For more information about Project Safe Childhood, please visit www.justice.gov/psc.

Anyone with information on suspected child sexual exploitation can contact the National Center for Missing and Exploited Children by calling 1-800-THE-LOST (1-800-843-5678) or online at https://report.cybertip.org.

###

 

 

2022 St. Louis Murder-for-Hire Results in Life Term in Prison

Source: US FBI

ST. LOUIS – U.S. District Judge Matthew T. Schelp on Thursday sentenced a St. Louis County, Missouri man to life in prison for the murder of a New Jersey man in 2022.

Moreion Lindsey, 35, was found guilty at a trial in January in U.S. District Court in St. Louis of one count of conspiracy to commit murder-for-hire and one count of murder-for-hire. Evidence and testimony showed that Lindsey fatally shot Titus Armstead on April 21, 2022, in Penrose Park in St. Louis.

Lindsey had been hired for the murder by Jerome Williams, at the request of a Seattle man, Ray Bradley, who trafficked cocaine and marijuana to St. Louis and other cities. Bradley falsely blamed Armstead for the theft of drugs and millions of dollars from a Bradley “stash” house in New Jersey. Bradley had Armstead fly to St. Louis, purportedly to protect him from possible harm. Bradley’s real goal was to have him killed in St. Louis because Williams said he knew someone who could do the job, evidence and testimony showed. Lindsey met Armstead at the airport and drove him to Penrose Park, where he fatally shot Armstead with a .45-caliber handgun, evidence showed. He then took a photo of the body using a prepaid “burner” phone to provide proof of the death to Williams and Bradley.

Lindsey was later paid $15,000 by Williams. Williams disposed of evidence, including the burner phone, Armstead’s Social Security card and other belongings. Lindsey had the SUV that he used to drive Armstead to the park reported stolen and then used $5,000 to buy another SUV.

In a victim impact letter to the court, Armstead’s sister wrote, “In a world full of limitless opportunities—where every day offers a chance to grow, create, and build a meaningful life—why choose a path of destruction and harm? It is deeply saddening that amidst all the gifts and possibilities life offers, some would resign themselves to a life of drugs and violence.”

“Moreion Lindsey, you threw away your life for $15,000—an amount you could have earned in six months of full-time work at minimum wage,” she added. “Instead, you chose a path that has deprived your children of a father and your mother of her son. You will spend the rest of your life without freedom—unable to enjoy a warm shower, a comfortable bed, or even the simple joys of being with your family.”

Williams, 52, pleaded guilty in December to a charge of destruction of evidence to obstruct a federal investigation. He was sentenced April 23 to 138 months in prison.

Bradley, 46, pleaded guilty in June to one count of conspiracy to commit murder-for-hire and one count of conspiracy to distribute cocaine. He was sentenced in September to 25 years in prison.

The case was investigated by the FBI, the St. Louis Metropolitan Police Department and the Atlanta Division of the Drug Enforcement Administration.

Nevada Resident Arrested And Charged In Connection With Violent Tesla Arson In Las Vegas

Source: US FBI

LAS VEGAS – A Las Vegas resident made his initial appearance today in United States District Court in Las Vegas, Nevada, to face federal charges related to an arson at a Tesla collision business.

Paul Hyon Kim, 36, was charged by criminal complaint with one count of unlawful possession of an unregistered firearm and one count of arson. Kim was arrested by Las Vegas Metropolitan Police Department officers on March 26. He remains in federal custody pending a detention hearing scheduled for March 28, 2025, and preliminary hearing scheduled for April 10, 2025, before United States Magistrate Judge Elayna J. Youchah.

“The Department of Justice has been clear: anyone who participates in the wave of domestic terrorism targeting Tesla properties will suffer severe legal consequences,” said Attorney General Pamela Bondi. “We will continue to find, arrest, and prosecute these attackers until the lesson is learned.”

“As promised, acts of violence and vandalism will not be tolerated, and today law enforcement personnel acted quickly to arrest an individual on charges including arson,” said FBI Director Kash Patel. “Under Attorney General Bondi’s leadership, we will continue to pursue these investigations with the full force of law and will bring to justice anyone responsible for these attacks.”

“Today’s federal charges demonstrate our strong partnerships and collaboration with law enforcement partners and the joint pursuit to end domestic terrorism,” said Acting U.S. Attorney Sue Fahami for the District of Nevada. “Thank you to the detectives from the Southern Nevada Counterterrorism Center (SNCTC), FBI Joint Terrorism Task Force (JTTF) and Las Vegas Metropolitan Police Department (LVMPD) ARMOR (All-Hazard Regional Multi-Agency Operations and Response) unit, as well as Clark County Fire Department Arson Investigators, the Clark County District Attorney’s Office, the FBI, the ATF, and the Justice Department’s National Security Division for their hard work and tireless efforts. We will prosecute this case to the fullest extent of the law and remain steadfastly committed to working with our law enforcement partners to combat domestic violent extremism.”

“The arrest announced today showcases the remarkable outcomes achievable through collaborative task force partnerships,” said Special Agent in Charge Spencer L. Evans, FBI Las Vegas Division. “To ensure community safety, it is essential for law enforcement at all levels to work in unison. Although our agencies have distinct roles and responsibilities, the fight against crime is a shared commitment.”

“ATF responded alongside our law enforcement partners to the targeted attack on a Tesla collision shop in Las Vegas,” said Special Agent in Charge Jennifer Cicolani, San Francisco Field Division, Bureau of Alcohol, Tobacco, Firearms & Explosives (ATF). “At the forefront of ATF’s mission is combating violent crime.  Crimes of this nature will not be tolerated and are a threat to public safety. Threats to public safety will be taken seriously and law enforcement will utilize our resources to ensure justice is served. ATF deployed our experts in arson related crimes in response to this incident. Those experts included members of our Arson Task Force. A task force that is a collaboration between ATF and the Clark County Fire Department. A certified fire investigator, bomb technician, certified explosive specialist, and an accelerant detection K9 were utilized at the scene.  Special agents from our local field office also responded to the incident. ATF is pleased to see the arrest made today. We will continue to work alongside our law enforcement and prosecutorial partners to ensure that these targeted attacks are investigated and that the person(s) responsible are prosecuted.” 

According to allegations in the complaint, on March 18, 2025, Las Vegas Metropolitan Police Department patrol officers responded to an emergency call about a person setting vehicles on fire and hearing gunshots at a Tesla collision business. The Clark County Fire Department arrived to suppress the fires. During the investigation, it was determined that Molotov cocktails and a .30 caliber AR-style firearm were used to damage and destroy five Tesla vehicles, and graffiti was sprayed to write “Resist” on the front of the building.

      

Photo: Suspect in black hoodie, black pants, and carrying a black backpack while spray painting the glass doors of a business. 

 

Photo: A Molotov cocktail that did not ignite laying on seat in vehicle with broken glass window

On March 26, law enforcement officials executed various state search warrants related to this case, including a search warrant at Kim’s residence. Inside the residence, they found various firearms, including an AR style rifle consistent with the firearm used in the March 18, 2025 incident and with a suppressor on it, a black gun belt with a pouch and a small drop of pink paint residue, a black hoodie, face masks, and a handwritten note with what appeared to be an escape plan.

Attorney General Pamela Bondi for the Department of Justice; Director Kash Patel of the FBI; Acting U.S. Attorney Sue Fahami for the District of Nevada; Special Agent in Charge Spencer L. Evans of the FBI Las Vegas Field Office; Special Agent in Charge Jennifer Cicolani of the ATF San Francisco Field Division; and Sheriff Kevin McMahill for the Las Vegas Metropolitan Police Department made the announcement.

The case was investigated by the Las Vegas Metropolitan Police Department, the Clark County District Attorney’s Office, the FBI, the ATF, and with significant assistance by the Clark County Fire Department. Assistant U.S. Attorney Jacob Operskalski for the District of Nevada and Trial Attorney Patrick Cashman of the National Security Division’s Counterterrorism Section are prosecuting the case.

If convicted, Kim faces a maximum statutory penalty of 10 years in prison for the unlawful possession of an unregistered firearm charge and a mandatory minimum sentence of five years in prison up to a maximum of 20 years in prison for the arson charge.

The Las Vegas Metropolitan Police Department, the Clark County District Attorney’s Office, the FBI, and the ATF are investigating the case and with significant assistance from the Clark County Fire Department.

Assistant U.S. Attorney Jacob Operskalski for the District of Nevada and Trial Attorney Patrick Cashman of the National Security Division’s Counterterrorism Section are prosecuting the case.

A complaint is merely an allegation, and all defendants are presumed innocent until proven guilty beyond a reasonable doubt in a court of law.

###

 

Cuban National Indicted for Bank Robbery

Source: US FBI

LAS VEGAS – A Cuban national with an outstanding warrant of removal made his initial court appearance Wednesday before United States Magistrate Judge Nancy J. Koppe for allegedly robbing a bank with a dangerous weapon.

According to allegations contained in the indictment and statements made in court, on February 1, 2025, Anoy Lopez-Bles, 50, robbed a bank with a replica firearm.

Lopez-Bles has six prior felony convictions including bank robbery in the District of Nevada, and multiple burglary and drug felonies in Nevada. He has five prior misdemeanor convictions including domestic violence, drug, and larceny convictions in Nevada. He failed to appear 20 times and has violated his probations or parole over 10 times.

Lopez-Bles is charged with one count of bank robbery. A jury trial has been scheduled to begin May 19, 2025, before Chief United States District Judge Andrew P. Gordon.

If convicted, Lopez-Bles faces the maximum statutory penalty of 20 years in prison. A federal district court judge will determine any sentence after considering the U.S. Sentencing Guidelines and other statutory factors.

Acting United States Attorney Sue Fahami for the District of Nevada and Special Agent in Charge Spencer L. Evans for the FBI Las Vegas Division made the announcement.

The FBI and Las Vegas Metropolitan Police Department investigated the case. The United States Attorney’s Office for the District of Nevada is prosecuting the case.

An indictment is merely an accusation, and a defendant is presumed innocent unless and until proven guilty.

###

 

 

FBI Honors Community Leader Dr. John Horgan with National Award

Source: US FBI

On Friday, April 25, 2025, Special Agent in Charge Paul Brown of the Atlanta Field Office presented Dr. John Horgan with the FBI Director’s Community Leadership Award (DCLA) for his dedicated work directing the Violent Extremism Research Group, which has not only impacted Atlanta, Georgia, but has had transformative impact worldwide. Dr. Horgan, who is a distinguished university professor at Georgia State University’s Department of Psychology, accepted the award. Dr. Horgan has shown a strong and enduring commitment to applying his extraordinary abilities and expertise to further the interests of U.S. National Security.

The FBI established the DCLA in 1990 to publicly acknowledge the achievements of those working to make a difference in their communities through the promotion of education and the prevention of crime and violence. Each year, one person or organization from each of the FBI’s 55 field offices is chosen to receive this prestigious award.

“Dr. Horgan has not only been a trusted collaborator with the FBI, but his research has also been instrumental in deepening our understanding of extremist psychology, thereby enhancing the safety of our communities,” said Paul Brown, special agent in charge of FBI Atlanta. “Congratulations, Dr. Horgan! Your dedication and pursuit of excellence have made a lasting impact, and we look forward to continuing our partnership with you.”

Dr. Horgan’s research examines terrorist psychology. He has over 120 publications, and his books include The Psychology of Terrorism (now in its second edition and published in a dozen languages), Divided We Stand: The Strategy and Psychology of Ireland’s Dissident Terrorists; and Walking Away from Terrorism. Dr. Horgan has helped to shape the thinking of scientists, policymakers, and the public; helping them to better understand the pathways and processes by which people become attracted to, engaged with, and (importantly) disengaged from violent extremist ideologies and activities.

The FBI recognizes the important role that community partnerships play in keeping our shared communities safe. These partnerships – as exemplified by the breadth of the work by the DCLA recipients – have led to a host of crime prevention programs that protect the most vulnerable in our communities, educate families and businesses about cyber threats, and work to reduce violent crime in our neighborhoods. Learn more about the Director’s Community Leadership Award program, the FBI’s general outreach efforts, and the Atlanta Field Office About — FBI on our website.

Ukrainian National Extradited From Spain to Face Conspiracy to Use Ransomware Charge

Source: US FBI

Defendant Allegedly Took Part in Global Ransomware Scheme Using “Nefilim” Ransomware Strain

Earlier today, in federal court in Brooklyn, a superseding indictment was unsealed charging Artem Stryzhak with conspiracy to commit fraud and related activity, including extortion, in connection with computers, for his role in a series of international attacks using the Nefilim ransomware.  Stryzhak, a Ukrainian citizen, was arrested in Spain in June 2024 and extradited to the United States on April 30, 2025.  The arraignment will be held later today before United States Magistrate Judge Robert M. Levy.

John J. Durham, United States Attorney for the Eastern District of New York, and Christopher J.S. Johnson, Special Agent in Charge, Federal Bureau of Investigation, Springfield, Illinois Field Office (FBI), announced the charges.

“As alleged, the defendant was part of an international ransomware scheme in which he conspired to target high-revenue companies in the United States, steal data, and hold data hostage in exchange for payment.  If victims did not pay, the criminals then leaked the data online,” stated United States Attorney Durham.  “The criminals who carry out these malicious cyber-attacks often do so from abroad in the belief that American justice cannot reach them.  The extradition of the defendant and today’s charges prove that they are wrong.”

Mr. Durham also thanked the Justice Department’s Office of International Affairs, Computer Crime and Intellectual Property Section, the FBI’s New York Field Office and the Government of Spain for their crucial assistance in securing the arrest and extradition from Spain of Stryzhak.

“The FBI has long recognized that combating international ransomware schemes requires strong partnerships,” stated FBI Special Agent in Charge Johnson.  “The successful extradition of the defendant is a significant achievement in that ongoing collaboration and it sends a clear message: those who attempt to hide behind international borders to target American citizens will face justice.”

As alleged in the superseding indictment, Nefilim ransomware was deployed to encrypt computer networks in countries around the world, including in the Eastern District of New York.  These ransomware attacks caused millions of dollars in losses, both from ransomware payments and damage to victim computer systems.  The perpetrators of Nefilim typically customized the ransomware executable file for each victim, creating a unique decryption key and customized ransom notes.  If the victims paid the ransom demand, the perpetrators sent the decryption key, enabling the victims to decrypt the computer files locked by the ransomware program.

In June 2021, Nefilim administrators gave Stryzhak access to the Nefilim ransomware code in exchange for 20 percent of his ransom proceeds.  He operated the ransomware through his account on the online Nefilim platform, known as the “panel.”  When he first obtained access to the panel, Stryzhak asked a co‑conspirator whether he should choose a different username from the one he used in other criminal activities in case the panel “gets hacked into by the feds.”

Nefilim’s preferred ransomware targets were companies located in the United States, Canada, or Australia with more than $100 million in annual revenue. Stryzhak and others researched the companies to which they gained unauthorized access, including by using online databases to gather information about the victim companies’ net worth, size, and contact information.  In one exchange with Stryzhak in or about July 2021, a Nefilim administrator encouraged him to target companies in these countries with more than $200 million in annual revenue.

After gaining sufficient access to the victims’ networks, Stryzhak and his co‑conspirators stole data in furtherance of their scheme to extort ransom payments from them.  Nefilim ransom notes typically threatened the victims that unless they came to an agreement with the ransomware actors, the stolen data would be published on publicly accessible “Corporate Leaks” websites, which were maintained by Nefilim administrators.

The charges in the indictment are allegations and the defendant is presumed innocent unless and until proven guilty.  If convicted of the charge, Stryzhak faces up to five years’ imprisonment.

The government’s case is being handled by the Office’s National Security and Cybercrime Section.  Assistant United States Attorneys Alexander F. Mindlin and Ellen H. Sise of the Eastern District of New York and Trial Attorney Brian Mund of the Computer Crime and Intellectual Property Section are in charge of the prosecution, with assistance from Paralegal Specialist Rebecca Roth.

The Defendant:

ARTEM ALEKSANDROVYCH STRYZHAK
Age: 35
Barcelona, Spain 

E.D.N.Y. Docket No. 23-CR-324 (PKC)