Watch our cyber team share their key insights from their investigations into the biggest dark web trends in 2022. Telegram channels supplement traditional onion sites, blurring lines between the dark web sites and more mainstream communication tools. A Cleveland man has been sentenced to prison for taking part in a drug conspiracy that distributed fentanyl and methamphetamine throughout Northeast Ohio. The U.S. Attorney’s Office for the Northern District of Ohio today announced the unsealing of 17 federal indictments charging more than 30 people allegedly involved in connection with firearms offenses…
– Silk Road
As lockdowns begin to lift globally, these markets have emerged from the chaos of the last few months with even greater immunity to dangers. At the height of lockdown, mail-sorting offices were over-run, short-staffed and swamped with millions of extra parcels as online sales boomed. This had a knock-on effect on the darknet drug trade, which relies on postal deliveries to keep business moving.
- As reported last year, some drug shops have been outsourcing services like website hosting and payment processing.
- As cyber threat intelligence professionals monitor these markets, they gain insights into emerging threats and malicious activities that can impact organizations and individuals.
- District Judge Robert Wier to 78 months in prison, for conspiracy to sell counterfeit drugs and knowingly causing the sale of a counterfeit drug.
- There was an increase in larger-value orders, coronavirus-themed deals, and cut-price custom deals, normally given to valued offline resellers.
Cypher Marketplace
Finally, because these markets have hundreds of different sellers, they have a much bigger product stock. Under federal law, Sabbagh must serve 85 percent of his prison sentence. Upon his release from prison, he will be under the supervision of the U.S. Sabbagh must also forfeit cryptocurrency seized by the Drug Enforcement Administration, and agreed to the imposition of a $5,055,377 forfeiture money judgment, representing the amount of proceeds he received from the scheme. LONDON, Ky. – A Lebanese and Italian national, Alessandro Sabbagh, 27, was sentenced on Friday by U.S. District Judge Robert Wier to 78 months in prison, for conspiracy to sell counterfeit drugs and knowingly causing the sale of a counterfeit drug.
Investigations
For example, on WHM, I found 16 MDMA listings at a price less than $2, excluding shipping payment. The cheapest MDMA I discovered cost $1.18 per gram with free delivery and 100% refund – a piece of cake, in my opinion. In addition to counterfeit merchandise, MGM Grand Market offers access to stolen credit card information, compromised bank accounts, and other financial fraud-related services. And the fragmentation of illicit markets, particularly in drug sales, signals a shift toward decentralization — with criminal enterprises moving away from traditional darknet marketplaces toward more agile and resilient platforms.
In May, the EMCDDA reported that drug supplies had stayed steady across the continent, and that the market remained profitable. “The pandemic has had a major impact on our lives and is slowing down our economy,” Europol chief Catherine De Bolle said in the EMCDDA’s latest joint report on the drug market. Seizures of illegal drugs in some EU countries during the first half of 2020 have been higher than in the same months of previous years,” she wrote. On the dark-web drug market Empire this week, business proceeds as usual. “Satisfied customer, will be back,” writes one user on the product page of a meth dealer with the handle shardyshardface.
Escrow Priority
Operation RapTor’s scale reflects a new era of international coordination. U.S. agencies like the FBI, DEA, IRS-CI, and HSI worked alongside Europol, the U.K.’s NCA, and law enforcement from over a dozen countries. At the same time, financial enforcers like OFAC sanctioned individuals running darknet markets—including Iranian national Behrouz Parsarad of Nemesis—demonstrating how financial tools are being brought into alignment with traditional law enforcement.
Trade is booming despite disruptions from law enforcement and particularly “exit scams”, in which market admins abruptly close down sites and take all available funds. More than six years after the demise of Silk Road, the world’s first major drug cryptomarket, the dark web is still home to a thriving trade in illicit drugs. In addition to its emphasis on stolen credentials, 2easy Market offers a variety of cybercrime tools, such as hacking services, exploit kits, and other resources for conducting cyberattacks. The market frequently makes headlines for releasing massive troves of stolen data, often as a way to advertise its services. In this post, we’ll walk you through the top 10 dark web marketplaces that you need to watch for potential threats to your organization. Earlier today, a New York man was resentenced to three years in prison for his creation and operation of BreachForums, a marketplace for cybercriminals to buy, sell, and trade hacked or…
Trade Craft
Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users. The market is known for its extensive product listings and reputation system that helps buyers evaluate the reliability of vendors. The platform is favored by cybercriminals seeking access to accounts that can be exploited for fraud or sold to others. Transactions are conducted through Bitcoin and Monero which provides anonymity for both buyers and sellers. The expanding use of cryptocurrencies by terrorist organizations and state-sponsored actors illustrates the dual-edged nature of technological innovations — providing both opportunity and risk. Ransomware actors and fraudsters are leveraging technological advancements, including cross-chain bridges and artificial intelligence, to bypass detection and scale their operations.
- Campaign management tools, attribution systems, and platform integration are essential for scalable, data-driven advertising.
- Indeed, Hydra was so popular that vendors had illegal ads painted on the streets of cities, advertising drugs or jobs.
- ASAP drives 25,000+ listings and $4M monthly across BTC, XMR, LTC, and USDT, holding a 7% share.
- Enter the darknet’s elite trading sphere—10 top markets shaping 2025 with verified onion links, detailed vendor stats, and crypto commerce insights.
- In 2024, however, many vendors of reagents and precursors have turned to criminal forums to advertise their product offerings, or have delisted (at least publicly) chemicals related to fentanyl synthesis.
Darknet Markets Overview – April 2024
A complaint filed in the District of New Jersey was unsealed today charging Thalha Jubair, a United Kingdom national, with conspiracies to commit computer fraud, wire fraud, and money laundering… Russian Market has consistently remained one of the most popular and valuable data stores on the dark web. Its affordability and reliability have earned it a loyal customer base. The platform’s activity has increased significantly over the past year, indicating its growing influence and market share in the underground economy. To expand their reach, some marketplaces established parallel channels on Telegram. This further complicates monitoring efforts because now you need to search for the related Telegram channels and track activity there and on the marketplace itself.
“Excellent,” reads a plaudit posted by a buyer of the opiate oxycodone. “Bravo,” says another for a $5 sample of fentanyl, one of 18 reviews posted on the product’s profile page in the last week. In all, Empire lists over 18,000 narcotic offerings, including hundreds for oxycodone alone. If you cannot think of any valid reasons why the stuff costs so cheap in a darknet marketplace, it’s likely a low-grade product. Use logic and math to find goods in the popular vendor shops perfectly balanced in terms of price and quality.
In an economy where the demand—drug-addicted users—remains constant or growing, that’s only to be expected. Since 2020, 2easy has sold massive stealer logs with sensitive data like passwords, bank cards, and initial access credentials. It supports operations in multiple languages and operates on both clearnet and Tor. Lin’s undoing came in May 2024, when he was arrested while transiting through New York’s JFK Airport.
A Narcotics Everything Store
Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced sanctions against Parsarad for his role as the administrator of Nemesis Market. According to OFAC, Nemesis Market facilitated the sale of nearly $30 million worth of drugs between 2021 and 2024. The evolving landscape of crypto crime in 2024 highlights a complex interplay between advancing security measures and increasingly adaptive illicit actors. While efforts to curb illegal activities have shown promising results, threat actors continue to innovate — exploiting vulnerabilities within decentralized finance, blockchain infrastructure, and emerging technologies.
Rookies, on the other hand, value each review and try to do their best to attract clients. Furthermore, if a new seller fails to complete at least 40 successful deals (on White House Market, WHM), he won’t get back a $400 vendor’s bond. In case a dealer gets on the list of scammers, his account will be banned, and his bond won’t be refunded. It allows you to browse listing without registration unlike Royal and Nemsis market. Available categories are drugs, online business, software, services, forgeries/counterfeits, and defense/counter intel. TRM has observed that these manufacturers have adapted their practices in response to intensified law enforcement efforts.
How Do Dark Web Marketplaces Work?
This increase may be due in part to the closures of top DNMs, the shift to the exclusive acceptance of XMR by other active markets, and delistings of XMR by popular centralized exchanges. The below graph shows an increase in Abacus sales (in BTC) following the closure of ASAP Market in July 2023, and a further increase following some CEXs delisting XMR. Historically, DNMs have usually cashed out their funds at centralized exchanges (CEXs). Although CEXs remain a stable destination in the DNM ecosystem, the pattern of sending funds to them shifted in 2024, as illustrated in the chart below. Last year, DNM vendors sent a significantly higher portion of their funds to DeFi than they did historically.
To optimize the process of shopping on darknet marketplaces, I use two techniques. Firstly, I select a drug category I am interested in and sort goods by the newest first. This way I look for recent listings added by both old-timers and beginners.
