Skip to content

Topic

Cybercrime Prosecution and Sentencing

Court outcomes, custodial terms and ancillary orders arising from law enforcement investigations into online criminal networks.

Current stories

securityConfirmed2 publishers

764 leader Prasan Nepal pleads guilty to a child exploitation conspiracy carrying up to 30 years

Prasan Nepal, the 21-year-old who led the 764 child sextortion network, pleaded guilty Thursday and faces 15 to 30 years in prison. The Justice Department calls 764 a violent extremist network, but the count he admitted is conspiracy to commit sexual exploitation of a child.

Reality

Evidence55
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence62
securityOne report1 publisher

Engineer who locked his firm out through its domain controller gets 32 months in prison

Daniel Rhyne got 32 months in federal prison for planting scheduled tasks on his industrial employer's domain controller that locked the firm out. Access to that one server let a single engineer delete or reset 318 accounts and change local administrator passwords on 3,538 machines.

Publishers:securityweek.com

Reality

Evidence70
Adoption
Not scored
Hype gap0
Incentives
Not scored
Confidence72
securityConfirmed7 publishers

Empire Market co-creator gets 40 years for $430 million market built mostly on drugs

Raheim Hamilton, co-creator of Empire Market, was sentenced to 40 years in prison for facilitating $430 million in illegal dark-web trade from 2018 to 2020. The published case rests on narcotics, and stolen credentials and hacking tools were a small part of what the site sold.

Perspective Coverage

8 publishers
Builder
Builder 12%
Operator
Operator 60%
Investor
Investor 28%

Reality

Evidence85
Adoption
Not scored
Hype gap+10
Incentives35
Confidence80
securityConfirmed10 publishers

MonsterCloud's owner is charged with passing off purchased ransomware keys as proprietary decryption

MonsterCloud owner Zohar Pinhasi is charged with paying ransomware gangs over $8 million for keys while billing victims over $19 million. The charges turn on when the firm paid, so a recovery contract has to fix the order of steps and the source of any sample decryption.

Perspective Coverage

11 publishers
Builder
Builder 6%
Operator
Operator 75%
Investor
Investor 19%

Reality

Evidence72
Adoption
Not scored
Hype gap+12
Incentives62
Confidence74
securityConfirmed3 publishers

Two former Air Force members get 189 months for BEC scams that diverted business wires

Former airmen Chijioke Timothy Odimegwu and Harafat Mogaji got a combined 189 months in federal prison for BEC scams that diverted a $1.68 million wire. Their scheme worked wherever a payer accepted new bank details on the strength of an email.

Perspective Coverage

4 publishers
Builder
Builder 11%
Operator
Operator 68%
Investor
Investor 21%

Reality

Evidence74
Adoption
Not scored
Hype gap0
Incentives30
Confidence78
securityConfirmed2 publishers

US charges Vietnamese man whose crypto wallets took in $53 million from fraud schemes

Trung Nguyen Van faces a US money-laundering charge over crypto wallets that the DOJ says took in $53 million from fraud between 2018 and 2024. The trail was still good enough to charge him years later, and the department's own figures show the wallets forwarded nearly all of the money.

Reality

Evidence58
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence55
securityConfirmed4 publishers

Five jackpotting guilty pleas describe a crew that shopped for ATM models it could infect

Prosecutors in Kansas say the group crossed state lines to reach ATMs it believed were architecturally softer, which makes the machine on the street the control that mattered. The FBI counts 700 such incidents in 2025.

Perspective Coverage

4 publishers
Builder
Builder 29%
Operator
Operator 54%
Investor
Investor 17%

Reality

Evidence70
Adoption
Not scored
Hype gap+20
Incentives50
Confidence65
securityConfirmed5 publishers

A Conti developer got four years for holding stolen data from 12 of the group's 1,000-plus victims

Two years of extradition work and a guilty plea produced a four-year sentence for one Conti developer, measured against a group that hit more than 1,000 organizations and reappeared under new names.

Perspective Coverage

5 publishers
Builder
Builder 20%
Operator
Operator 68%
Investor
Investor 12%

Reality

Evidence70
Adoption
Not scored
Hype gap+20
Incentives60
Confidence75
securityConfirmed5 publishers

Karen Vardanyan's 24-month Ryuk sentence is mostly time he has already served

Karen Vardanyan was arrested in Kyiv in April 2025, extradited within two months, and sentenced this week to 24 months that run against custody already served. Prosecutors had argued that only meaningful sentences change a cybercriminal's math.

Perspective Coverage

5 publishers
Builder
Builder 9%
Operator
Operator 80%
Investor
Investor 11%

Reality

Evidence68
Adoption
Not scored
Hype gap+10
Incentives40
Confidence66
securityOne report1 publisher

A year-old Scattered Spider guilty plea surfaced only when prosecutors moved on the crypto

Ahmed Hossam Eldin Elbadawy, 24, admitted his part in the group's extortion work a year ago. The plea reached the public record through filings seeking more than $17 million in cryptocurrency and luxury assets.

Publishers:scworld.com

Reality

Evidence34
Adoption
Not scored
Hype gap+12
Incentives46
Confidence47
securityOne report1 publisher

A forfeiture order disclosed Ahmed Elbadawy's year-old guilty plea in the Scattered Spider case

Elbadawy is the third of the five people charged in 2024 to be convicted. Prosecutors want at least $17.6 million in cryptocurrency and cash out of a spree the indictment ties to 29 compromised victims.

Publishers:cyberscoop.com

Reality

Evidence62
Adoption55
Hype gap+12
Incentives50
Confidence66
investOne report1 publisher

Conti's $150m in victim payouts produces one four-year sentence

The Justice Department sentenced Oleksii Lytvynenko to four years over Conti, the ransomware the FBI ties to more than $150m in victim payouts as of January 2022 and to attacks in 47 states. Four others stand charged in the same district.

Publishers:justice.gov

Reality

Evidence64
Adoption58
Hype gap+28
Incentives74
Confidence66
securityOne report1 publisher

Two years, 117 identified children: the only Com case this week with an outcome attached

A UK sentencing is the week's single security item measured in results rather than warnings, and the arithmetic is unflattering: 730 days of custody against 117 identified victims.

Publishers:sentinelone.com

Reality

Evidence52
Adoption63
Hype gap+18
Incentives58
Confidence46