Based on troves of evidence provided by the German authorities, Europol compiled intelligence packages to serve as a basis for further national investigations. Europol’s European Cybercrime Centre also facilitated the information exchange and carried out data analyses to identify vendors on the dark web. The law enforcement operation is the latest attempt to curb cybercrime and crack down on online marketplaces. German police seized the infrastructure of a similar marketplace called Nemesis in March, four months after taking down the illicit emporium Kingdom Market.
Key Takeaways
“The man advertised his service on his own Telegram channels and thematic communities, as well as on a world-famous IT resource, where he positioned himself as a project developer and found like-minded people,” the agency said. It is possible they are Sklianko Oleksandr Mykolaiovych and Chernykh Mykola Serhiiovyc, who were previously sanctioned by the European Council. The alleged administrators of the infamous Bohemia and Cannabia dark web marketplaces have been arrested after apparently shuttering the sites and trying to flee with their earnings. Due to their name and lack of transparency, dark pools are often viewed as suspicious by the public. However, there is a real concern that because of the sheer volume of trades conducted on dark markets, the public values of certain securities are increasingly unreliable or inaccurate. There is also mounting concern that dark pool exchanges provide excellent fodder for predatory high-frequency trading.
They’d be able to surveil a far larger portion of the dark-web economy, he says, and instill a sense in users that there was nowhere to hide. In interviews with WIRED, ahead of a talk they plan to give at Kaspersky Security Analyst Summit Thursday, two Netherlands National High Tech Crime Unit officers detailed their 10-month investigation into Hansa, once the largest dark-web market in Europe. At its height, Hansa’s 3,600 dealers offered more than 24,000 drug product listings, from cocaine to MDMA to heroin, as well as a smaller trade in fraud tools and counterfeit documents.
- He recommends verifying market employees carefully, and to weed out law enforcement infiltration through barium meal tests.
- Months of preparation and coordination have resulted in the takedown of two of the largest criminal Dark Web markets, AlphaBay and Hansa.
- The Bohemia marketplace ceased operations in late 2023 due to service disruptions, while its members suspected an exit scams of a rogue developer.
- Over its five years of activity, the marketplace amassed over 612,000 users with a total transaction volume of over €250 million (approximately $289 million) in Monero cryptocurrency transactions.
- Businesses should be aware of the potential for data leaks and invest in data loss prevention measures.
- It offered a vast range of narcotics, including cocaine, heroin, cannabis, MDMA, amphetamines, and synthetic opioids like fentanyl.
Bohemia And Cannabia Dark Web Markets Taken Down After Joint Police Operation
The marketplace is well-known for its bug bounty programs and robust security mechanisms, including mandatory 2FA. The market had some technical problems at the end of 2023, and one of the market’s administrators chose to end their services with an “exit scam.” They divided the money they made from the markets and closed down the website, but the authorities still tracked them. It turns out that a few of the servers were in the Netherlands, and the Police arrested a suspect believed to be one of the admins. The Dutch authorities have taken down the Bohemia and Cannabia dark web market, which was known for selling all sorts of illegal products, including drugs, DDoS attacks and many other cyber-related items.
Arrested Worldwide In Europol Dark Web Drug Sweep; Four In The Netherlands
Archetyp Market facilitated a reported minimum of 250 million euros (about $290 million) in drug transactions over five years, with over 600,000 users, 3,200 vendors, and 17,000 listings. Authorities seized assets valued at 7.8 million euros, including cryptocurrency and luxury goods, and deployed around 300 officers across multiple countries during the operation. The operation targeted Archetyp Market, a platform with over 600,000 users and transactions totaling at least 250 million euros, underscoring the scale and ongoing challenge of illicit drug sales facilitated by anonymizing technologies. Launched after the takedown of AlphaBay in 2021, Abacus Market has rapidly risen to prominence. It features over 40,000 listings including narcotics, counterfeit items, hacking tools, and stolen data.
Cybersecurity Month
Led by German police with support from Europol and Eurojust, authorities from Germany, the Netherlands, Romania, Spain, Sweden, and the US participated. Further market diversification occurred in 2015, as did further developments around escrow and decentralization. STYX Market focuses specifically on financial fraud, making it a go-to destination for cybercriminals engaged in this activity.
Dark markets, as well as various other services within darknets, are hosted as ‘hidden services’. This means that the servers providing these services are only accessible via Tor and do not have a public IP address or domain name. Hidden services can operate while keeping the physical location of the server hidden, which makes tracking and shutting them down considerably more challenging. The development comes as Ukrainian authorities have arrested a 28-year-old man for allegedly operating a virtual private network (VPN) that made it possible for people from within the country to access the Russian internet (aka Runet) in violation of sanctions. The service, which had more than 48 million IP addresses, is believed to have been launched by an unnamed self-taught hacker from the city of Khmelnytskyi in the aftermath of the Russo-Ukrainian war. The access, Ukraine’s Cyber Police said, was facilitated by setting up an autonomous server room in his apartment, with additional servers rented in Germany, France, the Netherlands, and Russia.
The State Of DDoS Defenses: Unpacking A New Survey Of 300 CISOs & Security Directors
Darknets and dark markets have fueled the growth of cybercrime, provided a marketplace for cyber threats, and expanded the attack surface for malicious actors. This hidden ecosystem challenges cybersecurity professionals, law enforcement agencies, and policymakers to devise innovative strategies to combat these emerging threats, making it a critical facet of the contemporary threat landscape. The shutdown of Archetyp, a major dark web drug market, demonstrates that law enforcement takedowns have only short-term effects, as such markets quickly re-emerge and adapt. Persistent trade and resilient user communities limit the long-term impact of these interventions.
Belangrijke Aandachtspunten Bij Dark Web Marketplaces
Many sites specialize in selling illegal goods that are not readily available on the public internet. Given the explosive growth of these markets, organizations must prioritize proactive threat monitoring. Axis Intelligence provides dark web surveillance solutions that help businesses identify leaked credentials, fraud attempts, and malware risks before they escalate. A Canadian market established in 2021, WTN offers over 9,000 products, including narcotics, fake goods, and digital services. Some sellers on Bohemia advertised they were shipping the products from the Netherlands. The initial police investigation revealed 14,000 transactions from the Netherlands took place with a value of at least 1.7 million euros.
Law enforcement agencies actively monitor these markets and can track users despite anonymity measures. Financial fraud is common, and you have no recourse if transactions go wrong since these markets operate outside legal frameworks. Yes, the darknet still exists and continues to operate through networks like Tor, I2P, and Freenet. While law enforcement regularly shuts down illegal marketplaces, the underlying infrastructure remains functional. New darknet sites and markets continuously emerge to replace those that get shut down. The darknet is used for anonymous communication, accessing censored information, and protecting privacy.
The operators of Bohemia and Cannabia apparently became aware of the Politie probe, which disrupted their operations, so in 2023 they allegedly pulled an “exit scam” that saw them close the services and make off with the operations’ funds. Police determined the sites carried out around 67,000 transactions each month, with record turnover of €12 million achieved in September 2023. Dutch police think the administrators personally made around €5 million from the operation before pulling the exit scam. He allegedly had a lot of data and bitcoin in his possession, but more than 8 million euros in virtual currency was seized during the arrest of the suspects.
This ability of dark web communities to thrive in disruptions reflects how dark web market users have become experts at adapting to risks, managing disruptions and rebuilding quickly. The durability of these markets tells us that if policing responses keep following the same playbook, they will keep getting the same results. And by focusing so heavily on these hidden platforms, authorities are neglecting the growing digital harms in the spaces we all use. Many of those members were previously identified and arrested, and the police expect that more arrests will follow as more evidence is unearthed from the seized infrastructure. At its peak, in September 2023, Bohemia/Cannabia generated over 12 million Euros ($13.1M) in revenue. The marketplace reportedly added 82,000 advertisements daily and facilitated 67,000 transactions every month.
Dutch Police Dismantled Bohemia/Cannabia, Two Major Dark Web Markets For Illegal Goods, Drugs, And Cybercrime Services
Focusing solely on dark web markets may overlook broader digital harms occurring on mainstream platforms. Archetyp launched in May 2020 and quickly grew to become one of the most popular dark web markets with an estimated total transaction volume of €250 million (A$446 million). It had more than 600,000 users worldwide and 17,000 listings consisting mainly of illicit drugs including MDMA, cocaine and methamphetamine.
For instance, a survey conducted by the Netherlands Authority for Consumers and Markets revealed that obtaining necessary permits for fiber deployment can take up to 18 months in some municipalities, significantly impacting project timelines and costs. Based on our observations from analysis on dark web data using Lunar, we’ve identified the top 7 marketplaces on the dark web in 2025. We developed Lunar to monitor the deep and dark web, including dark web marketplace sites.
‘No Name Given’ CDL Issued In NY Flagged In Oklahoma ICE Operation: Stitt
Today, darknets are populated by a vast array of users, ranging from privacy-conscious individuals to cybercriminals, hacktivists, and nation-state actors. These hidden networks provide a platform for illegal activities that include the sale of stolen data, hacking tools, weapons, counterfeit currency, and narcotics. Dark markets, often accessed through specialized marketplaces within darknets, are breeding grounds for underground economies, where users can engage in transactions while evading law enforcement and ethical oversight. The proliferation of data centers and the growing adoption of cloud computing services are key drivers propelling the growth of the Netherlands Dark Fiber Network Market. The country has established itself as a critical hub for data centers due to its strategic location, robust power grid, and favorable climate conditions.
