A Jordanian man living in Georgia recently pleaded guilty in federal court to operating as a cybercriminal access broker. He admitted to selling unauthorized login credentials for the networks of at least fifty different companies to an undercover officer.
Feras Khalil Ahmad Albashiti, a forty-year-old individual known online by several aliases including r1z, appeared before a U.S. District Judge in Trenton to enter his plea. He was charged with fraud and related activities involving unauthorized access credentials after a lengthy investigation into his digital activities. This legal development follows his extradition from the Republic of Georgia in the summer of 2024 to face charges in the United States.
The investigation began in the spring of 2023 when law enforcement officials started monitoring an online forum dedicated to the sale of malware and malicious code. During this period, investigators identified Albashiti as the person behind a specific online moniker used to facilitate illegal transactions. Evidence showed that he was actively marketing access to private corporate infrastructures within these specialized criminal communities.
In May 2023, the defendant finalized a deal with an undercover law enforcement officer to sell credentials that allowed entry into the systems of dozens of victim organizations. The transaction was completed using cryptocurrency to mask the movement of funds. By selling this access, he acted as a middleman who enabled other potential bad actors to infiltrate corporate environments without having to perform the initial breach themselves.
The federal charge Albashiti faces carries a maximum statutory penalty of ten years in prison and significant financial penalties. These fines can reach up to two hundred and fifty thousand dollars or double the financial gains or losses linked to the crime. His sentencing has been officially scheduled for May 2026, where the court will determine his final punishment based on the federal sentencing guidelines.
The successful prosecution was the result of collaborative efforts between the Justice Department and the Federal Bureau of Investigation. Special agents from the Newark field office led the inquiry that tracked Albashiti's digital footprint across international borders. Their work, supported by the Office of International Affairs, ensured the defendant was brought to justice in a New Jersey federal court.
Source: Jordanian Man Admits Selling Unauthorized Access to Computer Networks of 50 Companies
Fantastic breakdown of how initial access brokers operate in the cyber criminal ecosystem. The middleman model here is what makes these operations so scalable since the broker doesnt need to be thecnical enough to execute the breach themselves. I remeber working with a client who got hit this way and tracking attribution back to the access sale was nearly impossible.