Algerian Operator Extradited to U.S. on Charges Over Cybercrime Marketplaces
Prosecutors say the defendant ran storefront-style sites that sold phishing kits and stolen credentials and that evidence now in U.S. custody ties him to hundreds of crypto payments and thousands of victims.
Overview
- U.S. authorities extradited Abdellah Belmili from Spain and charged him in federal court in Buffalo with conspiracy to commit bank fraud, a count that carries up to 30 years in prison.
- Federal filings say Belmili ran two online marketplaces, market0day.com and spoxy.us, that sold phishing kits, lists of stolen financial credentials, access to compromised servers, and mass-SMS services paid for in Bitcoin.
- Undercover FBI purchases in December 2020 included a JPMorgan Chase phishing kit and access to a compromised email server, and investigators used those buys to trace the sites’ operations.
- Investigators linked the marketplaces to Belmili through code and account artifacts that contained his name and Telegram handle, company records, search warrants and cryptocurrency records showing about $900,000 in deposits and roughly 5,600 identified victims.
- Prosecutors say the operator embedded hidden backdoors in sold phishing kits and registered services with stolen identities, a pattern that extended victim harm and underscores how cross-border law enforcement and ongoing evidence disclosures will shape the case.