Reported by 4 outlets
Rydox marketplace admin pleads guilty, faces 22 years in prison
Why this score
- Breadth
- 2.00 / 2.0 · 4 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.13 / 0.6 · time to second source
- Recency
- × 0.03 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.1 / 10 = base × recency + community
Desk analysis
Ardit Kutleshi, a Kosovar national who created and ran the Rydox cybercrime marketplace, pleaded guilty in a US court to identity theft and money laundering conspiracy charges. He faces a mandatory two years for aggravated identity theft plus up to 20 years for money laundering, with sentencing set for February 9, 2027.
Rydox operated from February 2016 until its December 2024 takedown and served roughly 18,000 users. Sellers listed more than 321,372 products: stolen names, addresses, Social Security numbers, credit card data, and login credentials, along with phishing kits, stealer logs, and spamming tools. The marketplace logged over 7,600 sales and generated at least $230,000 in revenue.
The takedown was international. Kosovo police arrested Kutleshi and Jetmir Kutleshi in December 2024, Albania's SPAK arrested Shpend Sokoli, the US seized the Rydox.cc domain, and servers in Kuala Lumpur were taken with the Royal Malaysia Police, along with roughly $225,000 in cryptocurrency. The Kutleshi brothers were extradited to the US in early April 2025.
The plea closes the marketplace case but the parallel BlackDB.cc prosecution, whose admin Liridon Masurica was extradited in May 2025, continues from the same FBI-led Kosovo operation. Watch Kutleshi's sentencing and whether buyers and sellers on the marketplaces face follow-on charges.
Timeline
-
original reporting
Rydox marketplace admin pleads guilty, faces 22 years in prison https:// bleepingcomputer.com/news/security/ rydox-marketplace-admin-pleads-
www.bleepingcomputer.com · 18d ago · September 25th, 2026
Rydox marketplace admin pleads guilty, faces 22 years in prison https:// bleepingcomputer.com/news/security/ rydox-marketplace-admin-pleads-
via X https://www.bleepingcomputer.com/news/security/rydox-marketplace-admin-pleads-guilty-faces-22-years-in-prison/
-
update from spak.gov.al
SPAK përfundon operacionin kundër tregut të paligjshëm kibernetik RYDOX, arreston 3 administratorët e tij (NJOFTIM PËR SHTYP, Datë 12.12.2024)
spak.gov.al · 671d ago · December 12th, 2024
Albania's Special Anti-Corruption and Organized Crime Structure (SPAK) announced operation RYDOX on 12 December 2024, arresting three administrators including Kosovo citizen Sh.S. (Shpend Sokoli), who resided in Albania. It states Rydox made over 7,600 sales since February 2016 generating at least $230,000, offered more than 321,372 cybercrime products to an 18,000-user base, and sold names, addresses, Social Security numbers, card data, and login credentials of thousands of people residing in the United States. Seizures listed: one computer, six laptops, five mobile phones, other storage devices, documents, and cryptocurrency assets, while US authorities seized the www.Rydox.cc domain. Partners named include the FBI's Pittsburgh office, Albania's BKH, Kosovo's Special Prosecution and Police, and the Royal Malaysia Police.
-
update from securityweek.com
Rydox Cybercrime Marketplace Disrupted, Administrators Arrested
securityweek.com · 669d ago · December 13th, 2024
First-day coverage of the US takedown announcement: Ardit Kutleshi, 26, and Jetmir Kutleshi, 28, were arrested in Kosovo and awaiting extradition, while Shpend Sokoli was arrested in Albania to be prosecuted there. The US seized the www.Rydox.cc domain, seized servers in Malaysia with local police, and obtained authorization to seize approximately $225,000 in cryptocurrency.
-
update from securityweek.com
Kosovar Administrator of Cybercrime Marketplace Extradited to US
securityweek.com · 517d ago · May 14th, 2025
Coverage of the parallel BlackDB.cc case (admin Liridon Masurica, extradited 9 May 2025) that also fixes the Rydox timeline: Ardit Kutleshi and Jetmir Kutleshi were extradited to the US in early April 2025 after their December 2024 arrests in Kosovo, and Shpend Sokoli was arrested in Albania the same month. The December 2024 Kosovo operation against both marketplace admins came out of FBI-led investigations with Kosovo Police's Cybercrime Investigation Directorate.
-
update from bleepingcomputer.com
Rydox marketplace admin pleads guilty, faces 22 years in prison
bleepingcomputer.com · 18d ago · September 25th, 2026
A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools. The arrests were part of a joint international law enforcement operation that also shut down the Rydox marketplace , seized the Rydox[.]cc domain, and seized its servers in Kuala Lumpur with the help of the Royal Malaysian Police. Ardit Kutleshi was extradited from Kosovo to the United States in 2025, when he was charged with crimes related to their Rydox admin role, including conspiracy to commit identity theft, aggravated identity theft, two counts of identity theft, access device fraud, and money laundering. "Rydox put cybercriminal tools and sensitive data up for sale, including the stolen identities and logins of thousands of people," said Brett Leatherman, assistant director of the FBI's Cyber Division.
-
update from securityweek.com
Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court
securityweek.com · 18d ago · September 25th, 2026
He was extradited to the US last year. According to court documents, Rydox allowed cybercriminals to trade stolen personally identifiable information (PII), stolen payment card data, account credentials, and cybercrime tools. Rydox was estimated to have had approximately 18,000 users when taken down. More than 7,600 transactions were made through the marketplace between 2016 and 2024, and its operators received at least $232,000 in revenue.
-
mentioned by www.bleepingcomputer.com
# Rydox marketplace admin pleads guilty, faces 22 years in prison https://www. bleepingcomputer.com/news/secu rity/rydox-marketplace-admin-p
www.bleepingcomputer.com · 18d ago · September 25th, 2026
-
update from cyberscoop.com
Leader of 764 pleads guilty, faces up to 30 years in prison
cyberscoop.com · 5d ago · October 8th, 2026
A 21-year-old from North Carolina who joined and helped establish 764 as an underage teenager and quickly emerged as the leader of the child sextortion group until his arrest last year pleaded guilty in federal court Thursday, the Justice Department said. Prasan Nepal pleaded guilty to conspiracy to commit sexual exploitation of a child as part of a plea agreement with prosecutors and faces at least 15 years and up to 30 years in prison upon sentencing. Nepal, also known as “Trippy,” ran the nihilistic violent extremist network for almost four years and played a crucial role facilitating the grooming, manipulation and extortion of minors. Nepal and his alleged co-conspirator Leonidas Varagiannis , who was arrested in Greece last year, controlled membership in 764 and access to a subgroup of highly-involved members known as “764 Inferno,” according to court records. The Justice Department describes 764 as a “network of nihilistic violent extremists who engage in criminal conduct in the United States and abroad, seeking to destroy civilized society through the corruption and exploitation of vulnerable populations, which often include minors.” Members of 764 are affiliated with “ The Com ,” a global collective of loosely associated groups that commit financially motivated, sexual and violent crimes, according to threat researchers. Nepal instructed 764 members on how to exploit vulnerable children and commented on content posted in the group’s channels. He admitted to requiring