Immediately after a big takedown, users flood to remaining markets or spawn new ones a whack a mole cycle. It specialized in narcotics fentanyl, heroin, cocaine, stolen financial data, fake documents, and even in house money laundering/mixing services. By far the largest darknet market by volume was Hydra, launched in late 2015 in Russia. By 2017 it boasted 200,000+ registered users and 40,000+ vendors, with roughly 250,000 drug listings and 100,000 non drug listings.
Policy Research: The Hague Strengthens Its Position As The European Cybersecurity Capital
European police agencies especially are focused on disruption, he said. Irish police arrested the suspected Bohemia/Cannabia suspect on money laundering charges, potentially underscoring how converting cryptocurrency into currency isn't risk free. "A month later, they do another OpSec mistake, and still, police doesn’t come. And they grow sloppy and make more mistakes." "They imagine if they do a tiny mistake, that police will bust their doors the next day. Which is not the case," Cosoi said. Cybercriminals become complacent, said Alex Cosoi, chief security strategist at Bitdefender.
What Is Darknet?
For instance, you can choose the preferred security levels for enhanced protection. Having JavaScript enabled on the dark web can cause havoc because it can reveal your IP address to your website. Thus, use the best antivirus software that protects against these online threats. Therefore, you must run an IP leak test to ensure that the VPN is working completely fine and is not risking your digital security. Cybercriminals also use them to launch phishing scams and can even infect your device with malware, increasing the risk of other online threats.
Operation Bayonet was the 2017 joint law enforcement effort that took down AlphaBay and Hansa. This unprecedented coordinated takedown froze millions in Bitcoin and led to indictments of Hydra’s operators. On Apr 5, 2022, German police with US help seized Hydra’s servers and crypto wallets. Rather than a violent raid, Dream’s end was essentially an exit by the operators. Its admins announced the shutdown as authorities FBI, Europol, others were exposing dozens of its vendors in a sting Operation SaboTor.
European Police Make Headway Against Darknet Drug Markets
One of the administrators described it as a “shameful and disgruntled set of events” that led to the market’s closure. Radar Rundown The dark web hosts a ton of legal and illegal websites that contain unrestricted infor… When your data is found on the dark web, it means that you’ve been compromised. You can use a dark web scan tool to tell if your data has landed on the dark web. It trades in hacked bank accounts, stolen credit card information, and other services that facilitate cryptocurrency laundering.
Most vendors appeared to be operating from the United States (890), followed by the United Kingdom (338), and Germany (225). Whether the pivotal role of the Netherlands also extends online, has yet been unclear. Data from the European Monitoring Centre for Drugs and Drug Addiction suggested it is the main producer of MDMA, ecstasy and herbal cannabis and a key distribution hub for cannabis resin and cocaine.
- The coordinated law enforcement action in Europe and the US ranks as one of the most sophisticated takedown operations ever seen in the fight against criminal activities online.
- Despite the exit scam, investigators from the Netherlands, Ireland, the UK, and the U.S. continued their efforts, resulting in the arrest of two suspected administrators.
- We prioritize the confidentiality and security of your data.
- Operation Deep Sentinel June 2025 was the Europe led operation that seized Archetyp Market.
- According to court documents and statements made in court, Incognito Market was an online narcotics bazaar that started on the dark web in October 2020.
Expansion Of Data Centers And Cloud Computing Services
"Administrators, sellers and buyers of and on illegal marketplaces often believe themselves to be elusive to the police and the judiciary," said Stan Duijf, head of the operations unit of the National Investigation and Interventions. The Dutch police have announced the takedown of Bohemia and Cannabia, which has been described as the world's largest and longest-running dark web market for illegal goods, drugs, and cybercrime services. "Administrators, sellers and buyers of and on illegal marketplaces often believe themselves to be elusive to the police and the judiciary," said Stan Duijf, head of the operations unit of the National Investigation and Interventions
What Is The Dark Web? How To Access It Safely?
In addition to its emphasis on stolen credentials, 2easy Market offers a variety of cybercrime tools, such as hacking services, exploit kits, and other resources for conducting cyberattacks. This platform has rapidly become a key player in the fraud market, trading in PII and SSH credentials while making use of both the clear and dark web. BidenCash, established in 2022, is notorious for its involvement in selling stolen credit card information and personally identifiable information (PII). The market is known for its extensive product listings and reputation system that helps buyers evaluate the reliability of vendors. The market emphasizes anonymity and security, conducting transactions exclusively through cryptocurrencies like Bitcoin and Monero.
It dominated Russian and Eastern European trade in drugs and stolen data. When you buy or sell illegal goods online, you are not hidden from law enforcement, Europol’s director emphasized after a Dream Market bust. For instance, Hansa’s police run honeypot netted thousands of user identities, and dream markets collapse still provokes sting operations. By tracing financial flows, analysing digital forensic evidence, and working closely with partners on the ground, authorities were able to deliver a decisive blow to one of the most prolific drug markets on the dark web.
The 'game-changing' Attitude Behind A Very Creative Dark Web Takedown
The majority of the marketplaces are in English, but some have opened in Chinese, Russian, and Ukrainian. In July 2017, the markets experienced their largest disruptions since Operation Onymous, when Operation Bayonet culminated in coordinated multinational seizures of both the Hansa and leading AlphaBay markets, sparking worldwide law enforcement investigations. From then on, through to 2016 there was a period of extended stability for the markets, until in April when the large Nucleus marketplace collapsed for unknown reasons, taking escrowed coins with it. The market owners set up a phishing website to get the attacker's password, and subsequently revealed collaboration between the attacker and the administrator of Mr Nice Guy's market who was also planning to scam his users. Following these events commentators suggested that further market decentralization could be required, such as the service OpenBazaar, in order to protect buyers and vendors from this risk in the future as well as more widespread support from "multi-sig" cryptocurrency payments.
After AlphaBay closed, Abacus Market took its place as the world’s largest underground darknet marketplaces. Understanding what happens in these marketplaces is an important part of dark web monitoring. Cybercriminals gather on dark web stores to buy and sell illegal goods and stolen data. Based on our observations from analysis on dark web data using Lunar, we’ve identified the top 7 marketplaces on the dark web in 2025. While law enforcement regularly shuts down illegal marketplaces, the underlying infrastructure remains functional. Dark markets, as well as various other services within darknets, are hosted as ‘hidden services’.
- Nemesis Market is a relatively new wallet-less shop on the dark web where you don’t need to deposit any amount in your wallet before buying products from here.
- The alleged administrators of the notorious Bohemia and Cannabia dark web markets have been arrested after reportedly shutting down their dark web sites and attempting to escape with their profits.
- We’re back with another video in our Webz Insider video series on everything web data.
- The investigation outlined in the complaint affidavit linked the three defendants to WSM in a number of ways, including their access to the WSM computer infrastructure.
- Financial fraud is common, and you have no recourse if transactions go wrong since these markets operate outside legal frameworks.
- In fact, according to a study that was done in 2020, over 57% of the websites found on the Tor network contained illegal content.
Due to the technological progress, even users with the minimal expertise in cybersecurity can explore the depths of the darknet. On the Reddit-style dark web forum known as “Dread,” users are trying to determine which vendors were compromised by the operation, Straight Arrow News found. Darknet marketplaces remain central to illicit trade in 2025, with evolving business models, payment systems, and law enforcement responses. Ulbricht, serving a double life sentence without the possibility of parole in a high-security prison in Tucson, Arizona, used the network to set up the untraceable Silk Road marketplace.
The Cyber Express News
Some in the underground forums were fooled by fake posts from a released admin, a likely law enforcement ruse to sow confusion. According to Europol, the operation froze about €7.8 million in assets. They seized Archetyp’s servers in the Netherlands, arrested the alleged 30 year old German admin in Barcelona, and targeted high volume vendors. German police BKA led a coordinated raid involving Netherlands, Spain, Sweden, Romania and U.S. authorities.
KPN Telecom B.V., VodafoneZiggo, and T-Mobile Netherlands lead the market, leveraging their extensive network infrastructures and strong customer bases to capture significant market share. The growing number of industrial facilities and logistics companies in Rotterdam generates substantial demand for high-bandwidth connectivity to facilitate real-time data exchange and operational efficiency. The city’s status as a leading port and industrial hub necessitates robust network infrastructure to support its extensive logistics, transportation, and manufacturing sectors. The city’s prominence as a major financial and technology hub makes it a key center for dark fiber deployment. This trend is particularly evident in sectors such as telecommunications, finance, and cloud computing, where data integrity and speed are paramount.
Increasing Adoption Of Dark Fiber By Small And Medium Enterprises (SMEs)
This marketplace accepts payments via Monero but also supports the Escrow system. Moreover, this shop provides detailed statistics about each user profile on the platform, giving users a better idea of the vendors for the buyers and vice versa. The White House market offers impressive features like a mandatory PGP requirement that enables 2FA for the user’s profile and adds a protective layer. The marketplace is much more organized, which makes it easy to use and navigate. The marketplace has a pleasant, user-friendly interface built from the ground up.
In fact, a whole team of officers took turns impersonating the two admins, so that when disputes between buyers and sellers escalated beyond the moderators' authority, undercover agents were ready to deal with them even more efficiently than the real admins had. When a seller opened it, their device would connect to a unique url, revealing the seller's IP address to the police. In perhaps its most intrusive move of all, the NHTCU says it essentially tricked users into downloading and running a homing beacon. The site had been set up to automatically removed metadata from photos of products uploaded to the site; they altered that function so that it first recorded a copy of the image with metadata intact.
Around the same time, Dutch police had secretly taken over Hansa Market, then shut it down publicly on July 19, 2017. His work involves dissecting complex attack chains and developing resilient defense strategies for clients in the finance, healthcare, and technology sectors. Each takedown from Silk Road to Archetyp has shown that anonymity on Tor is fragile against determined investigators.
One of the better-known web-based drug forums, The Hive, launched in 1997, serving as an information sharing forum for practical drug synthesis and legal discussion. Though e-commerce on the dark web started around 2006, illicit goods were among the first items to be transacted using the internet, when in the early 1970s students at Stanford University and Massachusetts Institute of Technology used the ARPANET to coordinate the purchase of cannabis. We’re back with another video in our Webz Insider video series on everything web data. Watch our cyber team share their key insights from their investigations into the biggest dark web trends in 2022. Learn how to automate financial risk reports using AI and news data with this guide for product managers, featuring tools from Webz.io and OpenAI.
