Meet FBI’s most-wanted cybercriminal, Volodymyr Tymoshchuk, Ukrainian hacker accused of attacking hundreds of US firms and extorting millions

Who is at the top of the FBI’s most wanted people for cyber crimes? If this question comes to your mind, then you will be surprised to know where he is from: a major non-NATO ally country, Ukraine. As per US authorities, Volodymyr Viktorovych Tymoshchuk, a Ukrainian national, is one of the most dangerous ransomware operators in the world. Wanted by the FBI and the US Department of State, Tymoshchuk faces multiple federal charges connected to a sweeping cyberextortion campaign that targeted hundreds of companies across the globe, including more than 250 victims in the United States.

The State Department is offering up to $10 million for information leading to his arrest or conviction, making him one of the most sought-after cybercriminals under the Transnational Organized Crime Rewards Program. The Ukrainian has also been added to the list of Europe’s most wanted fugitives.

Also Read: Why Alex Karp, the Jewish CEO of Palantir, says he ‘spends a lot of time talking to Nazis’, what is the reality?

Who is Volodymyr Viktorovych Tymoshchuk?

According to the FBI, Tymoshchuk, known online by aliases such as “Boba,” “Deadforz,” “MSFV,” and “Farnetwork,” was born on October 2, 1996, in Ukraine. He allegedly speaks both Russian and Ukrainian and is believed to have ties to multiple countries, including Poland, Romania, Moldova, Türkiye, Russia, and Belarus.

Investigators estimate his height to be between 5'9" and 6'0" and his weight between 170 and 190 pounds.

The Ransomware operations

Federal authorities allege that between December 2018 and October 2021, Tymoshchuk helped operate and administer at least three major ransomware variants:

• Nefilim
  
  
  
• LockerGoga
  
  
• MegaCortex
  

Using these malicious tools, Tymoshchuk and his co-conspirators reportedly gained unauthorized access to victims’ computer systems and encrypted networks and demanded ransom payments in exchange for decryption keys. The schemes caused millions of dollars in financial losses, including ransom payouts and recovery costs.

According to the Justice Department, these operations impacted organizations across the United States and worldwide, making the group one of the most destructive ransomware networks of its time.

Federal charges and indictments

On May 7, 2024, the US District Court for the Eastern District of New York issued a federal arrest warrant for Tymoshchuk. He is charged with:

• Conspiracy to commit fraud and related computer activity
  
  
• Intentional damage to a protected computer
  
  
• Unauthorized access to a protected computer
  
  
• Transmitting threats to disclose confidential information
  
  

A 2024 superseding indictment further detailed his role in the deployment of the ransomware variants.

Rewards of up to $11 million

The US Department of State has issued:

• Up to $10 million reward for information leading to Tymoshchuk’s arrest or conviction
  
  
• Up to $1 million for tips leading to the capture of other key figures linked to Nefilim, LockerGoga, and MegaCortex
  

Why he’s one of the FBI’s most wanted cybercriminals

Tymoshchuk’s alleged involvement in globally disruptive ransomware operations, which crippled critical services, locked companies out of their own data, and caused extensive financial damage, has positioned him as a key target in international cybercrime enforcement efforts.