Hamza Bendelladj

Background

Hamza Bendelladj, born June 3, 1988, is an Algerian national who became internationally known in cybersecurity and law enforcement circles under the online aliases "BX1" and "Daniel HB." He earned the informal nickname the "Smiling Hacker" after photographs taken at the time of his arrest showed him smiling while in handcuffs during media presentations.

Mode of Operation

Bendelladj used malicious software known as SpyEye to infiltrate the computer systems of banks and private individuals, harvesting passwords and account identification codes. Once access to an account was obtained, the funds were drained. The SpyEye botnet, which ultimately infected more than 60 million computers worldwide — predominantly in the United States — was developed in collaboration with his Russian associate Aleksandr Andreevich Panin, who operated under the alias "Gribodemon." The malware was used to steal banking credentials from victims and was deployed against more than two hundred American and European financial institutions. The United States Department of Justice later estimated that the SpyEye virus was responsible for approximately one billion dollars in theft. Bendelladj's activities placed him on Interpol's and the FBI's lists of the ten most wanted hackers, prompting a search that lasted approximately five years.

Arrest and Extradition

Bendelladj was arrested on January 7, 2013, by Thai police at a Bangkok airport while making a transit stop between Malaysia and Egypt. He did not resist arrest. His wife and daughter, who were traveling with him, continued their journey to Egypt without him. He was extradited to the United States in May 2013 and faced trial in Atlanta, Georgia.

His accomplice, Aleksandr Panin, was arrested separately on July 1, 2013, at Atlanta's Hartsfield-Jackson International Airport and pleaded guilty before the Atlanta Federal Court in January 2014.

Legal Proceedings and Conviction

Bendelladj pleaded guilty on June 25, 2015, in Atlanta. He faced a potential sentence of up to 30 years in prison and a fine of fourteen million dollars. On April 20, 2016, a US court sentenced him to 15 years in federal prison followed by 3 years of probation. He was held at Terminal Island Federal Correctional Institution, a minimum-security facility. Panin received a sentence of 9 years and 6 months. Bendelladj's attorney announced an intention to appeal the court's decision.

Public Attention and Online Controversy

Following his arrest, rumors spread online — particularly on social media — that Bendelladj was facing the death penalty in the United States. A petition was launched calling on the Algerian Ministry of Foreign Affairs and US President Barack Obama to intervene on his behalf. The US Ambassador to Algeria, Joan A. Polaschik, publicly clarified via Twitter that computer crimes are not capital offenses under US law and are not punishable by death. Claims circulating online that Bendelladj had donated stolen funds to charitable causes were not supported by trial documents, and the US Department of Justice made no mention of any such donations in its proceedings.

Release and Return to Algeria

After completing his sentence, Bendelladj was released from US federal custody and returned to Algeria. Upon his return, he shared a photograph on Instagram captioned "ALGERIE Mi Amor," a reference to a song by the rapper L'Algérino. Algerian rapper Didine Canon 16 publicly celebrated his release. His return prompted public debate within Algeria regarding cybersecurity, the role of hackers in society, and the implications of his freedom.