Jordanian Man Pleads Guilty to Selling Stolen Logins for 50 Companies

Feras Khalil Ahmad Albashiti (aliases “r1z,” “Feras Bashiti,” “Firas Bashiti”) pleaded guilty in U.S. federal court to selling stolen login credentials that granted unauthorized access to at least 50 companies; the sale occurred on May 19, 2023 to an undercover law enforcement officer. Extradited from Georgia, he faces up to 10 years in prison and fines with sentencing scheduled for May 11, 2026, and prosecutors seek forfeiture of proceeds—this case highlights the role of access brokers in the cybercrime economy.