[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frkPFz0TkXTUVDcc7tXxiQEnBOd03hGLcYUKJi2oi9gE":3},{"article":4,"iocs":50,"watch_terms":68,"solutions":69,"lesson":72},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"70aacb67-98fb-4a01-8912-a3b0e1306776","Algerian Man Extradited to US for Running Cybercrime Marketplaces","algerian-man-extradited-to-us-for-running-cybercrime-marketplaces-0cc5ec","26-year-old Abdellah Belmili faces up to 30 years in prison for allegedly operating the marketplaces Market0Day and Spoxy. The post Algerian Man Extradited to US for Running Cybercrime Marketplaces appeared first on SecurityWeek.","Abdellah Belmili, an Algerian national, has been extradited to the US to face charges for allegedly operating two cybercrime marketplaces, Market0Day and Spoxy. These platforms facilitated the sale of phishing kits and bulk SMS services for mass phishing campaigns. Belmili is accused of defrauding multiple financial institutions and impacting thousands of victims, with approximately $900,000 deposited into his controlled account.","Algerian man extradited to US for operating cybercrime marketplaces Market0Day and Spoxy.","https:\u002F\u002Fwww.securityweek.com\u002Falgerian-man-extradited-to-us-for-running-cybercrime-marketplaces\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F06\u002Fhacker-arrested.jpeg","2026-06-23T12:06:15+00:00","2026-06-23T14:00:21.622627+00:00",7,[17,20,23,25,28,30],{"name":18,"type":19},"Abdellah Belmili","threat_actor",{"name":21,"type":22},"Market0Day","product",{"name":24,"type":22},"Spoxy",{"name":26,"type":27},"JPMorgan Chase","vendor",{"name":29,"type":27},"American Express",{"name":31,"type":27},"Bank of America","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":32,"icon":34,"name":35,"slug":36},null,"Threat Intelligence","threat-intelligence",[38,43,48],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":49},{"id":32,"icon":34,"name":35,"slug":36},[51,55,58,62,65],{"type":52,"value":53,"context":54},"domain","market0day.com","Cybercrime marketplace operated by Abdellah Belmili.",{"type":52,"value":56,"context":57},"spoxy.com","Cybercrime marketplace created by Abdellah Belmili after Market0Day.",{"type":59,"value":60,"context":61},"mitre_attack","T1566.001","Phishing: Spearphishing Attachment",{"type":59,"value":63,"context":64},"T1566.002","Phishing: Spearphishing Link",{"type":59,"value":66,"context":67},"T1071.001","Application Layer Protocol: Web Protocols",[26,29,31],{"controls":70,"vendors":71},[],[],{"slug":73,"title":74,"body":75,"framework_refs":76,"framework_notes":87},"cybercrime-marketplace-operator-extradited-for-phishing-kit-sales-and-mass-fraud","Cybercrime Marketplace Operator Extradited for Phishing Kit Sales and Mass Fraud","Abdellah Belmili allegedly operated underground marketplaces (Market0Day and Spoxy) that commercialized phishing kits and bulk SMS services, lowering the barrier to entry for cybercriminals worldwide. By commoditizing phishing-as-a-service, these platforms enabled thousands of attacks against financial institutions and their customers at scale. The case highlights how cybercrime ecosystems thrive when organizations and individuals fail to recognize and report phishing attempts early. The approximately $900,000 in fraudulent proceeds underscores the significant financial damage that even a single marketplace operator can facilitate across many victims. International law enforcement cooperation was ultimately essential to dismantling this operation, demonstrating the global nature of modern cybercrime.",[77,78,79,80,81,82,83,84,85,86],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 10 – Malware Defenses","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST SP 800-53 SI-8 – Spam Protection","NIST SP 800-63B – Digital Identity Guidelines (MFA)","GDPR Article 32 – Security of Processing","GDPR Article 33 – Notification of a Personal Data Breach","PCI DSS Requirement 12.6 – Security Awareness Program","ITIL – Continual Service Improvement (Security Incident Review)","FS-ISAC Threat Intelligence Sharing Guidelines",{}]