Access broker caught: Jordanian pleads guilty to hacking 50 companies

A Jordanian man, Feras Khalil Ahmad Albashiti, known online as “r1z,” pleaded guilty in a US court to acting as an access broker, selling unauthorized access to the networks of at least 50 companies, according to DoJ. He admitted fraud-related charges tied to trafficking stolen access credentials. Investigators uncovered in May 2023 that Albashiti sold access to the networks of at least 50 victim companies to an undercover officer in exchange for cryptocurrency.

Albashiti was arrested in Georgia and extradited from Georgia in July 2024, and he faces up to 10 years in prison and a $250,000 fine, with sentencing set for 11 May 2026. The undercover sting highlighted his use of the online moniker “r1z” and his activity on an online forum where malware and malicious code were offered for sale. The case underscores the role of initial access brokers in cybercrime, with DoJ describing Albashiti’s actions as fraud and related activity in connection with access credentials.