Access broker caught: Jordanian pleads guilty to hacking 50 companies

A Jordanian man pleaded guilty in the US to selling illegal access to 50 compromised enterprise networks after an undercover sting.

A Jordanian national Feras Khalil Ahmad Albashiti (40), living in Georgia, pleaded guilty in a US court to acting as an access broker, selling unauthorized access to the networks of at least 50 companies. Known online as “r1z,,” the man admitted fraud-related charges tied to trafficking stolen access credentials.

“Feras Khalil Ahmad Albashiti, a/k/a “r1z,” a/k/a “Feras Bashiti,” and a/k/a “Firas Bashiti, 40, pleaded guilty before U.S. District Judge Michael A. Shipp in Trenton federal court today to an information charging Albashiti with fraud and related activity in connection with access credentials.” reads the press release published by DoJ.

In May 2023, investigators uncovered that Albashiti, using the alias “r1z,” sold unauthorized access to at least 50 companies’ networks to an undercover officer for cryptocurrency.

“In May 2023, law enforcement officers were investigating an online forum where malware and malicious code was being offered for sale. Albashiti controlled an online moniker named “r1z” and used it in the online forum.” continues the press release. “On May 19, 2023, Albashiti sold to an undercover law enforcement officer unauthorized access to the networks of at least 50 victim companies in exchange for cryptocurrency.”

Albashiti was arrested in Georgia, extradited from Georgia in July 2024, he now faces up to 10 years in prison and a $250,000 fine. Sentencing is set for May 11, 2026.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, access broker)