After judge orders release of hacker tied to ISIS, US says 'Not so fast'

Ardit Ferizi was scheduled to head home to Kosovo amid a 20-year sentence.

A convicted hacker whom a U.S. court granted compassionate release during the coronavirus pandemic may remain behind bars after all, following accusations that he committed crimes while in custody. 

Since 2016, Ardit Ferizi, a Kosovan national, has been serving a 20-year prison sentence for providing details about 1,300 U.S. military and government personnel to the Islamic State terrorist group. A judge in December awarded Ferizi, who is overweight and has asthma, compassionate release, citing his vulnerability to COVID-19. 

That was until the U.S. Department of Justice on Jan. 12 unsealed a federal complaint against Ferizi alleging that he had committed multiple new federal crimes while he had been in prison. The charges involve Ferizi allegedly operating a scheme with a family member — who had access to Ferizi’s old email accounts — to monetize stolen personal information, credit card numbers and other data. 

Ferizi was being held in the Federal Correctional Institute in Terre Haute, Indiana while he was awaiting deportation back to Kosovo when the charges were made public. An attorney for Ferizi could not immediately be located for comment. 

“We allege Ferizi provided access to personal information of U.S. citizens, even as he was serving his prison sentence for providing similar information to ISIS,” U.S. Attorney David Anderson said in a statement. 

Ferizi and his unnamed family member used Google, PayPal and Coinbase to try carrying out new crimes, the Justice Department alleged. 

Authorities initially arrested Ferizi in 2015 in Malaysia when he was 19 years old and going by the online alias “Th3Dir3ctorY.” He admitted to hacking an Arizona electronics company and sending a list of federal personnel he obtained in that breach to a contact in the Islamic State group. By scouring the list of stolen addresses, Ferizi found the email usernames ending in “.mil” and “.gov” in a crime that a judge at the time said was motivated more by immaturity than ideology. 

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure