Garofano is a member of the Fappening hacker group found guilty after Emilio Herrera, Edward Majerczyk, and Ryan Collins.
Majerczyk was sentenced to 9 months in prison and Collins was sentenced to 18 months in prison. Meanwhile, Herrera who hacked 550 iCloud and Gmail accounts will be sentenced in February 2018.
The US Department of Justice says Garofano runs a phishing method between April 2013 and October 2014 to steal usernames and passwords to access iCloud accounts.
He sends emails to his target, including to a number of celebrities. He also confessed to working for Apple and asked for a login code and recommended resetting a password through a fake page that resembled the official Apple page.
The US Department of Justice said Garofano in a statement acknowledged that he got access to celebrity-owned content.
Then, he uses the username and password to access his victim's iCloud account illegally. Thus, it allows him to steal personal information including photos and sensitive videos that are personal.
This 26-year-old hacker was found guilty and threatened with a 5-year prison sentence.
"Although most of Garafano's victims are people in the industrial world of Los Angeles, quite a few non-celebrity users living in Connecticut are victims," the law firm said in a statement.
