Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

First Cypriot to Be Extradited to US, on Hacking Charges

A 20-year-old Cypriot wanted for hacking offences in the United States is set to be the country’s first citizen to be extradited there, his lawyer said Monday.

The FBI accuses Joshua Epifaniou of extorting thousands of dollars from US firms while still a teenager by breaking into their IT systems and threatening to leak their data if they didn’t pay.

A 20-year-old Cypriot wanted for hacking offences in the United States is set to be the country’s first citizen to be extradited there, his lawyer said Monday.

The FBI accuses Joshua Epifaniou of extorting thousands of dollars from US firms while still a teenager by breaking into their IT systems and threatening to leak their data if they didn’t pay.

Following a protracted case, during which Epifaniou spent almost two years in prison, a Nicosia district court ruled late last week to extradite him.

“He is the first Cypriot to be extradited to the US and the first Cypriot to be extradited since a change in the constitution in 2013 after Cyprus joined the EU,” his defence lawyer Michael Chambers told AFP.

His defence team tried to block his extradition, arguing that Epifaniou was aged 15 to 17 at the time and suffers from Asperger’s syndrome, a developmental disorder characterised by significant difficulties in social interaction and communication.

“We argued that as he suffers from Asperger’s it would be against his human rights to be extradited and because of his age at the time, but the judge didn’t accept this,” said Chambers.

“There are other risks to his well-being such as the dangers he faces in the federal prison system.”

The lawyer said the young Cypriot faces 20 years in prison in two US states, Georgia and Arizona, if convicted of several counts of wire and computer fraud, identity theft and extortion.

“When you are 16, doing something like this from a bedroom in Nicosia, you can’t fathom the seriousness of your actions, there is no understanding of the consequences.”

Chambers said he was discussing with his client whether to appeal the decision.

Epifaniou was initially arrested in May 2017 on suspicion of carrying out a so-called DDoS, or distributed denial of service, attack on a private Cypriot telecoms firm.

Police later detained him when the US filed its extradition request in January 2018.

Chambers said the case has many similarities to that of Lauri Love, a British activist wanted by the US for hacking into FBI, US Central Bank and NASA systems.

Last year, UK appeals court judges ruled against an extradition as Love also suffers from Asperger’s.

“The Love case in the UK is almost identical but the UK didn’t extradite him,” said Chambers.

Written By

AFP 2023

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.

Register

Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.

Register

Expert Insights

Related Content

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Application Security

PayPal is alerting roughly 35,000 individuals that their accounts have been targeted in a credential stuffing campaign.

Cybercrime

No one combatting cybercrime knows everything, but everyone in the battle has some intelligence to contribute to the larger knowledge base.

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...