Rydox Cybercrime Marketplace Shut Down and Three Administrators Arrested

The Justice system today announced the seizure of Rydox, an illicit website and marketplace dedicated to selling stolen personal information, access devices, and other tools for carrying out cybercrime and fraud, and the arrest of Rydox administrators and Kosovo nationals Ardit Kutleshi, 26, and Jetmir Kutleshi, 28. Both defendants were arrested earlier today in Kosovo by Kosovo law enforcement pursuant to a U.S. request for extradition.

A third administrator of the Rydox marketplace, Kosovo national Shpend Sokoli, was also arrested earlier today in Albania by Albania’s Special Anti-Corruption Body (SPAK). Sokoli is expected to be charged and prosecuted in Albania.

According to the indictment, the Rydox marketplace has conducted over 7,600 sales of personally identifiable information (PII), stolen access devices, and cybercrime tools, which generated at least $230,000 in revenue since its inception in or around February 2016. These sales included PII, credit card information, and login credentials stolen from thousands of victims residing in the United States. In addition, the Rydox site has offered for sale at least 321,372 cybercrime products to over 18,000 users including stolen PII such as names, addresses, and social security numbers; access devices such as stolen credentials for online accounts and credit card information; and cybercrime tools such as scam pages, spamming logs, and spamming tutorials.

“The Rydox marketplace was a one-stop shop where upwards of 18,000 of its cybercriminal customers could choose from more than 300,000 cybercrime tools,” said U.S. Attorney Eric G. Olshan for the Western District of Pennsylvania. “While cybercrime often involves conduct occurring overseas and the actions of foreign nationals, its harms can be devastatingly local, with residents in our own communities suffering financial ruin as a result of the theft and misuse of their sensitive personal information. Today’s takedown reinforces our steadfast message that the Western District of Pennsylvania and our domestic and international law enforcement partners will use every available tool to hold accountable those who pursue illicit profit at the expense of ordinary citizens around the world.”

The three defendants are currently awaiting extradition to the United States to face an indictment unsealed today in the Western District of Pennsylvania.

As part of the actions announced today, the United States also obtained judicial authorization to seize the domain www.Rydox.cc, which hosted and facilitated access to the Rydox website. The seizure of this domain by the government will prevent the owners and third parties from using the site to continue to buy and sell cybercrime tools and stolen personal information. Anyone visiting this site will now be redirected to a page notification of the seizure.

Defendant: Ardit Kutleshi, Jetmir Kutleshi, Shpend Sokoli

Criminal Charges: Administration of an illicit online marketplace dedicated to selling stolen personal information, access devices, and other tools for carrying out cybercrime and fraud

Location: Pennsylvania

Date: March 7, 2024

Status: Awaiting extradition to the United States

MORE FEDERAL CRIME NEWS

Cybercrime

Ghaleb Alaumary, International Money Laundering, California 2024

Sep 8, 2021

Cybercrime

Vitalii Antonenko, Computer Hacking, Massachusetts 2023

May 27, 2020

Cybercrime

Riane Leigh Brownlee, Impersonating an FBI Agent, North Carolina 2019

Apr 23, 2020

Cybercrime

Jenny A. Durkan, Cybercrime, Washington 2023

Mar 9, 2015