Hamza Bendelladj

Hamza Bendelladj, known online as BX1 and nicknamed the "Smiling Hacker," is an Algerian cybercriminal. He gained international notoriety for his role in developing and distributing the SpyEye banking trojan, which infected over 60 million computers worldwide and caused hundreds of millions of dollars in losses. His cheerful demeanor in photographs, often flashing a grin even in mugshots, contrasted sharply with the severity of his crimes, making him a memorable figure in cybersecurity history.

After a five-year international manhunt, Bendelladj was arrested in Bangkok in 2013 and extradited to the United States, where he pleaded guilty to racketeering conspiracy and was sentenced to 15 years in federal prison. As of 2026, his social media accounts remain active with large followings, and he continues to be a subject of fascination in hacker culture and true-crime communities. [edit]

Hamza Bendelladj was born in the Kouba district of Algiers, Algeria, on November 12, 1988. Growing up in the capital city, he showed an early aptitude for computers and technology. He pursued computer science studies and graduated from an Algerian university in 2008, which provided him with the technical foundation for his later activities.

In the late 2000s, Bendelladj transitioned from a computer science graduate to the underground world of cybercrime. He adopted the handle "BX1" and began developing and distributing malicious software. His pivotal moment came when he allegedly partnered with Russian hacker Aleksandr Andreivich Panin, known as "Gribodemon," to create and distribute the SpyEye malware kit. This collaboration set the stage for one of the most damaging banking trojans ever deployed. [edit]

Bendelladj's criminal career escalated rapidly after his partnership with Panin. SpyEye, a sophisticated banking trojan capable of keylogging, form grabbing, and injecting fake content into legitimate banking websites, infected more than 60 million machines worldwide, primarily in the United States. The U.S. Department of Justice described it as one of the most sophisticated and damaging banking trojans ever created. The malware was blamed for siphoning tens of millions of dollars from over 200 financial institutions across America and Europe.

In 2011, the U.S. Department of Justice indicted Bendelladj on multiple counts including conspiracy to commit wire and bank fraud, wire fraud, and computer fraud. The FBI placed him on its most-wanted list, and Interpol issued a red notice. After a five-year international manhunt, Thai authorities arrested him in Bangkok in January 2013, acting on a U.S. extradition request. He was extradited to the United States and, on March 2, 2016, pleaded guilty to one count of conspiracy to participate in racketeering activity. He was sentenced to 15 years in federal prison, while his co-conspirator Panin received nine and a half years. [edit]

Bendelladj's public image is dominated by his smiling appearance in photographs, which contrasts sharply with the severity of his crimes. This juxtaposition made him a highly memorable figure in cybersecurity coverage. Media portrayal has been largely negative, focusing on the scale of his criminal enterprise. However, some outlets have noted the polarizing nature of his story, with debate over his alleged charitable donations.

There is an informal following for Bendelladj within hacker culture and true-crime communities. His social media accounts present him as a "Former Blackhat Hacker and Most Wanted Cyber Criminal in the world," a self-branding that embraces his notoriety. With 2.2 million Instagram followers, his accounts suggest significant public interest, though this may include curiosity-seekers rather than dedicated fans. [edit]

Hamza Bendelladj commands a global audience defined by morbid curiosity rather than adoration, turning his infamy into a digital spectacle. The iFANN Global Fame Engine has evaluated this profile and determined he does not currently hold a placement in the published rankings, including the Global Top 1,000 or any scope-specific list. While no formal rank exists, his presence remains undeniable within cybersecurity circles and internet folklore. There is no documented fandom name for his supporters; the community surrounding him lacks an official designation. His online following consists of approximately 2.2 million Instagram followers and over 27,000 Facebook likes, yet these metrics reflect fascination with his status as a notorious international cybercriminal rather than genuine admiration. No organized fan campaigns, charity drives, or ritualistic projects have been documented in his name. Unlike entertainment icons who inspire street protests or fundraising efforts, Bendelladj's audience engages primarily through the consumption of news regarding his crimes and legal proceedings. The narrative is one of polarized interest, where the public grapples with the contrast between his cheerful mugshots and the severity of the SpyEye banking trojan he distributed.[edit]

Hamza Bendelladj earned the nickname "Smiling Hacker" because he habitually grinned in photographs, even during his mugshots. He allegedly claimed to donate illegal profits to Palestinian charities, a detail that sparked intense debate about his motives. SpyEye was capable of keylogging, form grabbing, and injecting fake content into legitimate banking websites. The FBI obtained samples of SpyEye malware "in the wild" during their investigation. His case is frequently cited as one of the most polarizing in hacker history. He is listed on Wikidata and has Wikipedia articles in eight languages, including Arabic, Bengali, French, Nepali, Portuguese, Turkish, and Urdu. A persistent legend claims he stole billions to fund the poor in Africa, but fact-checkers have debunked this as folklore. Another viral story from early 2024 suggested he had been executed in Algeria, though authorities confirmed he remained incarcerated in California at that time.[edit]

Limited public information is available about Bendelladj's family. He was born in Algiers, Algeria, and was 27 at the time of his 2016 sentencing. No details about his parents, siblings, or household have been publicly disclosed. His personal life has been largely overshadowed by his criminal case and incarceration. [edit]

Bendelladj is associated with Aleksandr Andreivich Panin, aka "Gribodemon," his Russian co-conspirator who co-developed SpyEye and was sentenced to nine and a half years in prison. His case was investigated and prosecuted by the U.S. Department of Justice and the FBI. [edit]

There is no publicly documented dating history, marriage, engagement, or known romantic relationships for Hamza Bendelladj in any credible source. His personal life has been largely overshadowed by his criminal case and incarceration. No credible outlets have reported on any romantic partners, spouses, or children. As of 2026, his relationship status remains unknown and undocumented. [edit]

No credible net worth estimate is available for Hamza Bendelladj from traditional celebrity financial outlets due to his criminal background and incarceration. However, research by the iFANN Editorial Team puts his estimated net worth at $10 Million as of 2026. This figure reflects the scale of his criminal enterprise, specifically his alleged share of SpyEye botnet proceeds which involved siphoning money from financial institutions. While some reports claimed he donated profits to Palestinian charities, these were never verified. His alleged criminal proceeds were reportedly in the tens of millions of dollars, but exact amounts were never publicly quantified. Any assets were likely seized or forfeited as part of his plea agreement, leaving only the estimated hidden funds to account for the current valuation.[edit]