Alleged SpyEye Trojan Developer Extradited to United States

Share it on Twitter  
Share it on Facebook  
Share it on Linked in  

Algerian hacker Hamza Bendelladj, a.k.a. "Bx1," was recently extradited from Thailand to the United States to face charges related to his alleged role in creating, marketing, distributing and controlling the SpyEye Trojan (h/t Krebs on Security).

Bendelladj, 24, faces one count of conspiring to commit wire and bank fraud, 10 counts of wire fraud, one count of conspiracy to commit computer fraud, and 11 counts of computer fraud. He was arrested at Thailand's Suvarnabhumi Airport on January 5, 2013, and was extradited to the U.S. on May 2.

According to court documents, from 2009 to 2011, Bendelladj and others allegedly developed, marketed and sold various versions and components of the SpyEye Trojan. Bendelladj allegedly advertised the malware on cybercrime forums, and operated command and control servers, including one in Atlanta, Ga., that allegedly contained information from 253 different financial institutions.

If convicted on all charges, Bendelladj faces a sentence of up to 30 years in prison for conspiracy to commit wire and bank fraud, up to 20 years for each count of wired fraud, up to five years for conspiracy to commit computer fraud, and up to five or 10 years for each count of computer fraud. He also faces fines of up to $14 million.

"The FBI has expanded its international partnerships to allow for such extraditions of criminals who know no borders," FBI Special Agent in Charge Mark F. Giuliano said in a statement. "The federal indictment and extradition of Bendelladj should send a very clear message to those international cyber-criminals who feel safe behind their computers in foreign lands that they are, in fact, within reach."