Both of these claims correspond with previous research showing that the dark web is perceived to be a safer place to buy and sell drugs. Additionally, threat actor ‘GermanDrugScout24’ advertised a wide array of illicit substances priced in euros. This shop primarily deals in synthetic drugs like mephedrone, A-PVP, and ecstasy. With nearly 292,000 members, RuTor is the largest DNM on the Russian-speaking dark web. The forum statistics panel also notes how the forum hosts over 2.2 million user posts scattered across 37,310 unique topics to date.
Abacus Market
Even if this statement was true, some of the accounts released were most certainly valid at the moment of publication, and they contained information about operations arranged on the marketplace. After the closure of Hydra, underground shop owners also became more careful. Some of them even masked their products and removed all public descriptions, so only vetted customers could see what they are selling. Saheed Aremu passionately advocates for digital privacy and cybersecurity in the modern digital age.
Lyphe Launches V Range: Affordable, Reliable, And Future-Ready Medical Cannabis
As a criminal market, it is deeply intertwined with a wide range of criminal activities, including cyber-dependent and financial crimes. As these illicit economies continue to flourish, tackling and dismantling the criminal networks involved will require more than technological advancements. The issue calls for international cooperation, policy adjustments and a deeper understanding of the constantly evolving cyber landscape.
Darknet Market Revenue Based On Drug-purchasing Behaviors
- To help Genesis Market victims and prevent future crimes, the Dutch Police created a Check your hack tool that lets victims see if their credentials were sold or for sale on Genesis Market.
- It was the first big site where people could anonymously buy drugs using Bitcoin, and it gained a lot of attention, until it was shut down by the FBI in 2013.
- The seizures, to which ICE Homeland Security Investigations significantly contributed, include more than $200 million in currency and digital assets, over two metric tons of drugs, comprised of 144 kilograms of fentanyl or fentanyl-laced narcotics, and over 180 firearms.
- However, we may receive compensation from retailers and/or from purchases of products through these links.
- The deep web is a part of the internet that isn’t indexed by search engines, like your email accounts or online banking.
Anon Market has a wide range of offerings ranging from Drugs, Software, Tutorials, Forgery, Currencies, Databases and much more. Historically, Legalizer is positioned perfectly for the audience primarily based in Kazahstan, Moldova, Russia, and Belarus. As for drugs, the ‘foreigness’ of the forum is further evident from the types of drugs promoted, as well as those that are more difficult, if not impossible, to find there (A-PVP and Mephedrone).
Silk Road And Early Markets
The Republic of Karelia and the Chukotka have higher drug use rates than other regions of similar populations. This could indicate that there are specific regional influences on drug use. We took only “zakladka” with a small weight of substances ready for sale (5 g) because larger supplies can be resold on the same Hydra marketplace by other drug dealers so that they could be counted twice. The average grams of drugs in the 15 ranged regions presented by the Russian region per 100,000 population. This was a fascinating real-world experiment revealing what happens to a drug darknet marketplace that’s allowed to flourish. This stability and operational security have occurred despite the lack of large-scale law enforcement shutdowns of Russian-language platforms since April 2022, when Hydra Market was shut down.
Operation Deep Sentinel
It is common for darknet vendors to talk about their delivery and stealth methods to reassure customers that their purchases will be delivered as advertised and not seized by the authorities. However, vendors and marketplaces must balance revealing enough information about their concealment techniques to gain their customers’ trust while not exposing their methods and routes resulting in law enforcement interdiction. Using the darknet, deep web, and high-risk surface web data, DarkOwl analysts discovered multiple arms-centric marketplaces, vendor shops, and other classified-style advertisements for the sale of illegal firearms on the darknet.
Market Size
Also identified were several notable sellers who migrated to Kraken from the now closed Hydra marketplace. Around November 2022 the Administrator of WayWay started a new thread about the planned launch for a new marketplace called Kraken. Notably, the Administrator of WayWay has exactly the same alias (aka “Kraken”) who described the news of decentralized infrastructure having multiple data centers and nodes for the new project. Like RuTor, BlackSprut also offers cash-out services, including Bitcoin-to-Ruble and C2C transactions. Dark web chatter and innuendo suggests how both DNMs are rumored to be more pro-Ukrainian than Russian. Typically, the drug shops providing such mobile apps don’t reveal a lot of information, and their customers have substantial prior knowledge about them and their inventory from references or their past experience.
Same time, Solaris has also announced a significant upgrade to their payment system and blocked all payouts for 2 days around the same time which may confirm some activities behind the scenes, likely related to improvements of security of the marketplace. The marketplace has a well-established team including Administrator (Professor), Vice-Administrator(-s), Cybersecurity Team, Customer Support, and multiple moderators. The roles and responsibilities of the operators are like Hydra however look more advanced.
- DF claims they are safe from investigation as the site’s business model differs from that of DeepDotWeb, which took affiliate sales fees in return for keeping lists of URLs updated.
- Korean law enforcement have shown that they have the motivation, resources, and skills to catch entire networks of these vendors.
- Regardless, UAPS remains a key provider of payment infrastructure to top fraud shops.
- New and potentially more vulnerable population segments can be reached by exploitative drug dealers as they begin to sell on social platforms and the number of drug consumers in the US and around the world grows.
- This drop may be driven in part by stronger actions from the Chinese government following the Biden-Xi summit of November 2023.
A key theme throughout the year has been the resilience and adaptability of illicit networks. Sanctioned entities, terrorist organizations, and ransomware groups have shifted tactics in response to global crackdowns, embracing new technologies and methods to obscure their activities. This adaptability underscores the need for constant evolution in enforcement strategies and international cooperation.
While Hydra specified a category for each listing, we decided to further categorize all listings into 5 categories, aligning with the categorization offered by the Global Burden of Disease study. This adaptable approach ensures that our results can be harmonized for future comparison, providing a comprehensive understanding of the drug market dynamics. The evolving landscape of crypto crime in 2024 highlights a complex interplay between advancing security measures and increasingly adaptive illicit actors. While efforts to curb illegal activities have shown promising results, threat actors continue to innovate — exploiting vulnerabilities within decentralized finance, blockchain infrastructure, and emerging technologies. The arrest of Telegram’s founder, Pavel Durov, in August 2024 triggered a notable shift in the operational dynamics of the platform’s drug vendors. This incident also marked the never-before-seen attempt of its administrator, Pharoah (arrested in May 2024 and revealed to be 23 year-old Taiwanese national Rui-Siang Lin), to extort the marketplace’s users.
Beyond The ‘Silk Road’: Assessing Illicit Drug Marketplaces On The Public Web
In the post-OMG dominance period, OMG retained a number of those former Hydra counterparties, but lost a significant share of their illicit activity to the other two markets across all categories. When it comes to cybercriminal enablement, markets like Kraken Market, the DNM Aggregator, and Exploit.in are go-to services, providing bad actors with tools to carry out ransomware attacks, hacks, and more. Kraken Market also captured the largest share of transfers potentially sent for the purpose of obfuscating funds, as well as buying illegal products. In addition to that activity, markets like these host vendors that advertise their own cashout or swapping services, resulting in tens of millions of dollars in laundered funds. Darknet markets were one of two categories of crypto crime that saw revenues rise in 2023. In total, darknet markets and fraud shops received $1.7 billion last year, a rebound from 2022 — the year that saw the sizable Hydra Marketplace close.
This dramatic increase may reflect the decentralization of the drug trade away from traditional darknet markets, as vendors grow more adept at operating across multiple platforms on both the clearnet and darknet — including e-commerce websites and social media platforms. Much like with drug sales, a similar pattern of task differentiation emerged among darknet markets providing cybercriminal services. In the chart below, we see that the DNM Aggregator emerged as the clear leader among fraud shops enabling cybercrime, and Exploit.in and Kraken Market almost equally sold tools used to facilitate ransomware attacks. As for cybercriminal administration, the category includes inflows from ransomware affiliate wallets. This includes purchases such as malicious software and supporting services which cybercriminals sometimes make using escrow services on crime forums.
Dark web markets have exploded in scale and reach in 2025, becoming the most dangerous hubs for trading drugs, stolen data, and hacking tools. These anonymous marketplaces—operating mainly on the Tor network—are now a primary threat vector for businesses and cybersecurity professionals. Social media companies are under growing pressure to eradicate drug dealing on their platforms, says Ashly Fuller, a PhD candidate at University College London researching the sale and advertisement of illegal drugs to young people on social media. Data released by social media companies shows that millions of pieces of drug-related content are already taken down every year. (Facebook and Instagram took action against 9.3 million pieces of drug-related content last year, while Snapchat says it did so in 241,227 cases in the second half of 2023.) But these companies’ actions are sometimes indiscriminate. The accounts of organizations promoting drug harm reduction and social media personalities who post content about drugs and psychedelics, but who do not sell them, are being caught in the crossfire of efforts to get a grip on the issue.
