The UK’s National Crime Agency (NCA) said a British-Yemeni man gets 20 months in prison for website defacements and stolen data possession, adding that he also possessed stolen user data.
NCA arrested Al-Tahery Al-Mashriky in August 2022 after U.S. intelligence linked him to extremist hacker groups Spider Team and Yemen Cyber Army.
NCA investigators tied him to the group via social media and emails, while forensic analysis revealed he had hacked multiple sites, including Yemen’s Ministries of Foreign Affairs and Security Media, as well as an Israeli news outlet.
The Yemen Cyber Army (YCA) is a hacktivist group that has been active since 2015, declaring support for the Houthi rebels in Yemen’s conflict. It gained attention for defacing websites and leaking data, often targeting government agencies, media outlets, and organizations in Saudi Arabia and its allies.
Its operations are primarily propaganda-driven, aiming to spread political messages rather than financial gain.
While some researchers believe the group has ties to Iran-backed actors, the extent of this connection remains uncertain.
Al-Mashriky claimed on a hacking forum that he had hacked 3,000 websites over a three-month period in 2022.
“His offending centered around gaining unauthorized access to the websites, then creating hidden webpages containing his online monikers and messaging that furthered his religious and political ideology.” reads the statement published by NCA.
“He would often target websites with low security, gaining kudos in the hacking community for the sheer number of infiltrations. Using one of his many online aliases, Al-Mashriky claimed on one cybercrime forum that he had hacked in to over 3,000 websites during a three month period in 2022.”
On 17 March, the man pleaded guilty to nine offences and was sentenced to 20 months’ imprisonment at the same court on 15 August.
Deputy Director Paul Foster, head of the NCA’s National Cyber Crime Unit, said “He had also stolen personal data that could have enabled him to target and defraud millions of people.”
“Cybercrime can often appear faceless, with the belief that perpetrators hide in the shadows and can avoid detection.