“A considerable number of seized hacking forums or marketplaces resurrect almost intact a few weeks after the seizure under a similar or new identity. Illicit trade continues, while new admins and operators of underground resources take even better precautions to hinder investigations by law enforcement,” he added. Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below. Credible reporting from the referenced agencies, in addition to contributions from ATF; Army CID; CBP; Department of Treasury’s FinCEN and Office of Foreign Assets Control; and NCIS enabled domestic law enforcement actions in support of Operation RapTOR.
Cybercrime Hub Kingdom Market Shut Down
At its peak, Nemesis counted over 150,000 user accounts and 1,100 seller accounts worldwide, with about 20% of them being based in Germany. The platform only prohibited the sale of child abuse material, contract killing services, weapons, and Fentanyl-based substances. In furtherance of Operation RapTOR and in their first action as a JCODE member agency, the Office of Foreign Assets Control (OFAC) additionally sanctioned Behrouz Parsarad, an Iranian national, for his role as the founder and operator of Nemesis Market following seizure of the market.
Despite growing crackdowns from law enforcement agencies, the dark web remains a hotbed of criminal activity, offering everything from drugs to stolen data. THE HAGUE — Authorities in the U.S. and Europe arrested nearly 300 people, confiscated more than $53 million and seized a dark-web marketplace as part of an international crackdown on drug trafficking that officials say was the largest operation of its kind. The dark web marketplace, dubbed the Kingdom Market, was founded in March 2021 and offered drugs, malware, stolen data, and fake documents. BKA’s press release concludes that investigations to identify the people who operated the illegal market are underway, now also aided by analysis of the seized server infrastructure. The Federal Criminal Police Office in Germany (BKA) and the internet-crime combating unit of Frankfurt (ZIT) have announced the seizure of Kingdom Market, a dark web marketplace for drugs, cybercrime tools, and fake government IDs.
Strategic AI In Cyber Defense: How To Stay Ahead Without Increasing Risk
Established in 2022, WizardShop is one of the biggest data stores on the dark web, focusing mainly on carding and financial data. Its focus on financial fraud and high-value transactions has attracted a dedicated user base, contributing to its growing reputation and market value. The deposit fee on Kingdom darknet is 1%, and the withdrawal fee is 3% plus the commission for transactions in bitcoins, litecoins or Monero.
The platform was mainly used to sell narcotics, malware and counterfeit documents. Most recently, more than 42,000 products were offered on the marketplace, with 3,600 of the offers originating from Germany. Several hundred seller accounts and tens of thousands of customer accounts were registered. Payment was mainly processed via cryptocurrencies Bitcoin, Litecoin, Monero and Zcash, with the operators charging a 3 per cent commission. The Federal Criminal Police Office (BKA) and the Central Office for Combating Cybercrime (ZIT) have succeeded in striking a decisive blow against the darknet marketplace “Kingdom Market”. In an internationally coordinated operation, its server infrastructure, which was distributed across several countries, was seized and the illegal provider was taken offline.
FAQ About European Darknet Markets
As BleepingComputer reported, Dread staff spread rumors about multiple individuals with access to the marketplace server infrastructure being arrested. The Dark Web marketplace facilitated the sale of illicit goods, including fake government IDs, drugs and hacking tools, to its visitors. Kingdom Market’s website has been online since March 2021 and has been accessed by visitors worldwide. German authorities and law enforcement from the US, Ukraine, Moldova and Switzerland have seized the infamous Kingdom Market cybercrime marketplace in a joint operation. Tens of thousands of customers and several hundred sellers were registered with the marketplace, which listed over 42,000 products at the time of its takedown, the notice claimed. “The operators of the Darknet website are particularly suspected of commercially operating criminal trading platforms on the Internet and of committing crimes against the Narcotics Act,” Germany’s Federal Criminal Police Office (BKA) said in a press release.
Top Markets
HSI is a worldwide law enforcement leader in Darknet and other cyber-related criminal investigations. The DHS Cyber Crimes Center (C3) combats cybercrime, online child sexual exploitation, and criminal exploitation of the internet with state-of-the-art forensic technology. The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. It also uses global law enforcement networks, like Europol, to combat cybercrime threats. To monitor the movements of several darknet marketplaces and impose appropriate legal measures, the Global Drug Policy Observatory (GDPO) conducted a situation analysis to examine how darknet vendors market and circulate their products to potential and existing customers. While the darknet caters to traders and users worldwide, considerable attention is given to darknet markets in the United Kingdom.
- If you’re lucky, it will gracefully retire, but in the worst scenario, it will exit scam.
- Beginning in September 2021, Abacus Market has established itself as one of the leading dark web marketplaces.
- The platform’s activity has increased significantly over the past year, indicating its growing influence and market share in the underground economy.
- In addition, malware, criminal services and forged documents are advertised through the platform for profit.
- The Federal Criminal Police Office in Germany (BKA) and the Frankfurt cybercrime combating unit (ZIT) conducted the action on Wednesday, March 20, 2024, with law enforcement taking down the website and confiscating approximately $100,000 in cash.
- Europol, which is based in The Hague, built its intelligence on evidence from Germany, which seized the marketplace’s “criminal infrastructure” in December 2021, the agency said.
Transactions on the marketplace were conducted using cryptocurrencies such as Bitcoin, Litecoin, Monero, and Zcash. The BKA revealed that the platform hosted around 42,000 items for sale, with 3,600 of them originating from Germany. German authorities have seized the server infrastructure of the darknet marketplace Nemesis Market, which facilitated the sale of narcotics, fraudulently obtained data, and offered a selection of other cybercrime services, including ransomware. The site had tens of thousands of customer accounts and several hundred seller accounts, underscoring the extensive scope of its illicit activities.
Indian Arrested Over Sale Of Illegal Drugs Disguised As Sex Aids On Dark Web
Ever since the r/darknetmarkets discussion thread on Reddit was shut down, web users of the Dark Web have felt the lack of real-time information about reliable sites and vendors in full force. Darknet markets London pioneered the adoption of Bitcoin and to this day provides one of the most tangible uses of cryptocurrencies. The importance of involving those working in the technology business is emphasized further in the report.
Addressing Security & Privacy Concerns
For the first time, FBI agents from all of the bureau’s field offices visited buyers to tell them about the overdose danger of pills sold online, which are often disguised to look like prescription drugs. Torzon Market has established itself as a significant player in the darknet ecosystem, offering a secure, user-centric platform for anonymous trading. Its commitment to privacy, diverse product offerings, and robust security measures make it a preferred choice for users seeking discreet transactions within the darknet. The development comes days after another coordinated law enforcement effort saw the dismantling of the BlackCat ransomware’s dark web infrastructure, prompting the group to respond to the seizure of its data leak site by wresting control of the page, claiming they had “unseized” it. However, BKA’s official announcement today about the seizure confirmed that it was a law enforcement operation.
These platforms sell everything from drugs and fake IDs to weapons and hacking tools, resembling a digital black-market bazaar. Freshtools is a unique marketplace in that it does not only provide the stolen data, but it allows criminals to purchase MaaS which can cause further damage to the victims. It is one of the most active and up to date markets and always provides new and updated malware and data. In a press release on Wednesday, the police said they posted a takedown notice on the website and are now analyzing Kingdom Market’s server infrastructure to identify the people behind the website’s operation.
One of the suspects, Alan Bill, has already been arrested in the US on drug trafficking, identity theft and money laundering conspiracy charges, according to posts on X (formerly Twitter). This year’s law enforcement operation was accompanied by a public awareness campaign called Operation ProtecTor aimed to promote public safety and spread awareness of resources for those struggling with substance abuse and who go through extreme lengths to obtain opioids. JCODE has worked with every FBI field office in the country to facilitate outreach to households that have purchased individual amounts of opioids from the darknet. The interagency efforts are aimed to both identify those who use anonymizing technologies to purchase illicit narcotics and direct them to available resources. The seizure is the result of parallel investigations and close coordination between German, American and Lithuanian law enforcement authorities, including the FBI, DEA (Drug Enforcement Administration) and IRS-CI (Internal Revenue Service Criminal Investigation) since October 2022. As mentioned earlier, the kingdom is a darknet site for the sale of surfactants.
A certain IP address (referred to as “IP ADDRESS 1”) that was utilized to gain access to a Kingdom Reddit account was also used to access BILL’s email address, cryptocurrency accounts, and ESTA application. So far, one arrest has been confirmed, that of Alan Bill, aka “Vend0r” or “KingdomOfficial,” a Slovakian who allegedly held an administrator role on the darknet platform and acted as a moderator for the market on Reddit. A few days ago, an announcement to all Kingdom Market residents was posted on the Darknet’s Dread forums by a suspected law enforcement officer or spoofing user under the nickname “FallenKingdom”. “German authorities are having some fun after seizing the dark web Kingdom Market, by changing the name to ‘Fallen Kingdom’ and then using the private #PGP key to notify individuals on Dread after police arrested Alan Bill, a #Slovakia national in the USA,” noted After Time X.
Immigration and Customs Enforcement, in collaboration with Europol, the Joint Criminal Opioid and Darknet Enforcement Team, and various national and international partners, announced the results of Operation RapTOR May 22. This historic takedown, led by Europol, resulted in the highest number of seizures in JCODE’s history. This type of darknet is primarily used for illegal activities such as drug trafficking and pornography.
- Kingdom Market is a stable darknet market that is successfully doing business since the march of 2021.
- The law enforcement authorities of the United States, Switzerland, the Republic of Moldova and Ukraine cooperated closely with the German agency in the course of the investigation.
- To counter these risks, organizations need robust, proactive solutions that go beyond traditional cybersecurity measures.
- Most importantly, Kolochenko emphasized the need towards global convention and the formation of organized cybercrime divisions.
- The first category includes classic marketplaces, which serve as one-stop shops for a wide range of illegal goods.
- It maintains a very strict level of user verification and integration with an official Telegram account to provide real-time updates to users.
Investigations
Local, state, and other federal agencies also contributed to investigations through task force participation and regional partnerships. Kingdom Market is a stable darknet market that is successfully doing business since the march of 2021. Kingdom market has developed a unique captcha system that helps it protect against ddos attacks.
