CyberNew CyberNew
Threat Intelligence & APT SecurityWeek 3 weeks ago

Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"A Kosovar national pleaded guilty in a US court to charges related to the creation and administration of the Rydox cybercrime marketplace. The individual, Ardit Kutleshi, 28, was arrested in December 2024 along with two other suspects, Jetmir Kutleshi and Shpend Sokoli. He was extradited to the US last year. Rydox was disrupted in December 2024, when the US obtained judicial authorization to..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Hacker pleads guilty

A Kosovar national pleaded guilty in a US court to charges related to the creation and administration of the Rydox cybercrime marketplace.

The individual, Ardit Kutleshi, 28, was arrested in December 2024 along with two other suspects, Jetmir Kutleshi and Shpend Sokoli. He was extradited to the US last year.

Rydox was disrupted in December 2024, when the US obtained judicial authorization to seize www.Rydox.cc, the domain that hosted the marketplace. The Rydox servers were also seized, along with roughly $225,000 in cryptocurrency.

According to court documents, Rydox allowed cybercriminals to trade stolen personally identifiable information (PII), stolen payment card data, account credentials, and cybercrime tools.

At least 321,372 cybercrime products were allegedly offered on Rydox, including stolen information such as names, addresses, credentials, credit cards, and Social Security numbers, along with phishing kits, stealer logs, and spamming tools.

Rydox was estimated to have had approximately 18,000 users when taken down.

Advertisement. Scroll to continue reading.

Written By Ionut Arghire

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →