A Kosovo man was charged in federal court in connection with Rydox, an online marketplace that conducted more than 7,600 sales of stolen personal information, hacking tools and other cybercrime products before it was shut down in December 2024. Ardit Kutleshi, an alleged administrator, was charged with selling stolen personal information online and with conspiracy to commit money laundering and aggravated identity theft.
According to TribLive, federal prosecutors say Rydox had more than 18,000 users and offered over 321,372 cybercrime products, including social security numbers, stolen credit card information, scam pages and spamming tutorials. The indictment reported that the site generated at least $230,000 in revenue.
Rydox included stolen personal information belonging to thousands of U.S. residents. An undercover FBI source made online purchases of stolen information from Rydox as part of the investigation.
How Federal Agents Built the Case
The undercover operation went further than a single purchase. As The Hacker News reported, an FBI source registered an account on the site in 2022. The same report describes how Rydox operated on a commission structure, keeping a 40% cut of every sale, with vendors receiving the remaining 60%.
Tracking down the site's infrastructure required crossing borders. Rydox operated since 2016, and its servers were in Malaysia until they were seized in Kuala Lumpur in December 2024, according to court records cited by PCMag. The U.S. government seized the domain www.rydox.cc, the Malaysian servers, and approximately $225,000 in cryptocurrency controlled by the defendants.
A Global Takedown With Local Consequences
Dismantling Rydox required a coordinated multi-agency coalition involving FBI Pittsburgh, Kosovo's Special Prosecution Office and Police, Albania's Special Anti-Corruption Structure (SPAK) and National Bureau of Investigation, and the Royal Malaysian Police, according to CyberScoop. Then-U.S. Attorney Eric G. Olshan for the Western District of Pennsylvania said the harms of cybercrime can be devastatingly local, the outlet reported.
Ardit Kutleshi was arrested in Kosovo in December 2024 and was expected to be extradited to the United States.
Brother's Case
Jetmir Kutleshi was also arrested in Kosovo in December 2024 and was expected to be extradited to the United States.
A third alleged administrator, Shpend Sokoli, who helped administer the Rydox marketplace, was arrested in Albania and was to be prosecuted there, according to the Department of Justice. It remains unclear whether Albanian authorities have concluded separate proceedings against him.
Charges Against Kutleshi
Ardit Kutleshi faces charges including conspiracy to commit money laundering and aggravated identity theft.
