Rydox Marketplace Administrator Pleads Guilty, Faces Up to 22 Years in Prison
Summary
Ardit Kutleshi pleaded guilty to aggravated identity theft and money laundering conspiracy for his role in Rydox, a marketplace for stolen personal data, credentials, payment card details, and cybercrime tools.
Key points
- Rydox sold stolen personal information, login credentials, credit card details, and cybercrime tools.
- Court documents say sellers made more than 7,600 sales and offered over 321,000 cybercrime products to more than 18,000 users.
- Authorities arrested Kutleshi and two other administrators in Kosovo and Albania in December 2024.
- The international operation shut down Rydox and seized its domain and servers in Kuala Lumpur.
- Kutleshi pleaded guilty to aggravated identity theft and money laundering conspiracy; sentencing is scheduled for February 9, 2027.
Article Details
- Event Type
- Guilty plea by an illegal marketplace administrator following an international law enforcement takedown
- Impact
- Rydox was shut down, its domain and servers were seized, and its administrators were arrested. Before closure, marketplace sellers completed more than 7,600 sales involving stolen data, and the marketplace served more than 18,000 users. Ardit Kutleshi faces a maximum of 20 years in prison for money laundering and a minimum of two years for aggravated identity theft.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | rydox[.]cc | Seized domain of the illegal Rydox marketplace. |
Threat Actors
Products
Countries
AlbaniaLaw enforcement arrested Rydox administrators in Kosovo and Albania in December 2024.KosovoLaw enforcement arrested Rydox administrators in Kosovo and Albania in December 2024.MalaysiaUnited StatesArdit Kutleshi was extradited from Kosovo to the United States in 2025, when he was charged with crimes related to their Rydox admin role, including conspiracy to commit identity theft, aggravated identity theft, two