On June 20, in a carefully timed move designed to catch the two German suspects at the keyboard, the German police raided the two men’s homes, arrested them, and seized their computers with their hard drives unencrypted. The Germans then signaled the Dutch police, who immediately began the migration of all of Hansa’s data to a new set of servers under full police control in the Netherlands. “They are being picked off one by one,” tweeted Alan Woodward, a cybersecurity researcher at Britain’s University of Surrey. “It takes time and a lot of dedicated effort, but these criminals are finding it increasingly difficult to avoid the light being shone into dark corners of the web.”
They immediately found that the development server also connected to a Tor-protected server at the same location that ran Hansa’s live site, as well as a pair of servers in another data center in Germany. They then made a copy of each server’s entire drive, including records of every transaction performed in Hansa’s history, and every conversation that took place through its anonymized messaging system. Police announced Friday that two of the highest-selling suppliers of drugs to Wall Street Market—which was the world’s second largest illegal online marketplace—were detained in the U.S. In Germany, three suspects had recently been arrested after a series of house raids.
Simulate Attacks, Find Weaknesses, And Improve Security Book A Demo
Assistance provided to victims of various forms of organized crime, including initiatives such as witness protection programs. The ability to control/manage the economy and regulate transactions (national and international) for trade to thrive within the rule of law. A state’s ability to implement measures to combat money laundering and other related threats to the integrity of its financial system. Consumption of the drug is considered in determining the reach of the criminal market. Stories behind bones found by chance during excavations sometimes remain a mystery.
Cyber Crimes
Most of the cocaine seized in Lithuania enters through the seaport of Klaipeda and is destined for Belarus, Russia or Scandinavian countries, passing through the UK, the Netherlands or Germany. The cocaine trade in Lithuania also relies on international connections with South American and African countries. Despite it being a relatively small country with most relevant anti-trafficking measures in place, Lithuania still serves as an origin and transit country for human trafficking; and increasingly as a destination country. Lithuanian citizens are mostly trafficked within other European countries for purposes such as prostitution, fictitious marriages and forced labour. The UK, Spain and Germany are prominent destination markets for Lithuanian trafficking victims, with a growing number of male victims being targeted for forced labour.
However, in its press release today the DoJ said that AlphaBay had more than 350,000 listings for illicit items of various kinds – Silk Road only had 14,000 when it was seized in 2013. This allowed for “the covert monitoring of criminal activities on the platform” until it was eventually shut down a month later. The Dutch National Police took over the Hansa marketplace on 20 June after two men in Germany were arrested and servers in Germany, The Netherlands and Lithuania were seized.
- They also seized millions of dollars’ worth of digital currencies like Bitcoin used exclusively on the websites.
- Drugs were the most common and lucrative goods to buy on Silk Road — making up 70% of the products for sale.
- “I’m distrustful of DeSnake, and I think across the communities there’s a general distrust.”
- This solution scans dark web forums to alert you if your data is being listed, traded, or otherwise exposed.
- (Some research has found that even bad news about the dark web markets only attracts more users to them.) And AlphaBay’s buyers and customers will eventually find a new home.
- Before its disruption, DarkMarket boasted nearly half a million users, more than 2,000 active sellers, and had overseen over 320,000 different transactions involving the transfer of 4,650 bitcoin and 12,800 monero, the equivalent of about €140m (£122.6m).
Other users noted that it still wasn’t clear how AlphaBay had been seized, given that its use of Tor and Bitcoin were meant to shield buyers, sellers, and admins from identification. For months, an extortionist had reportedly threatened to reveal the identity of one AlphaBay administrator, and even released identifying information about him after AlphaBay’s proctors sent him or her a hush-money payment. But dark web practitioners still have vague fears that law enforcement agencies found a method of breaking AlphaBay’s Tor protection–which potentially means sites like Dream Market and Hansa are vulnerable too. “It is frankly frightening,” one user wrote in response to news of the AlphaBay takedown. German authorities have announced the takedown of an illicit underground marketplace called Nemesis Market that peddled narcotics, stolen data, and various cybercrime services.
Defy Security Appoints Esteemed Cybersecurity Leader Gary Warzala To Its Board Of Directors
Hansa’s two suspected admins, the Dutch cops had discovered, were across the border in Germany—one 30-year-old man in the city of Siegen, and another 31-year-old in Cologne. But when the NHTCU contacted the German authorities to request their arrest and extradition, they discovered the pair were already on the radar of German police, and under investigation for the creation of Lul.to, a site selling pirated ebooks and audiobooks. As Boekelo tells it, the security firm had somehow found Hansa’s development server, a version of the site where it tested new features before deploying them in the live version that handled its formidable load of thousands of visits from drug shoppers every day. While the live Hansa site was protected by Tor, the development server had somehow been exposed online, where the security firm discovered it and recorded its IP address. Yet despite the takedowns, Shortis, who is a Ph.D. in criminology candidate at the University of Manchester, told Newsweek competition remains strong.
German Police Seize ‘Nemesis Market’ In Major International Darknet Raid

The exhibits include humans and animals that have been dead hundreds or even thousands of years. A federal grand jury returned a one-count indictment today against Jose Tobias Jimenez-Martinez, 35, a Mexican national residing in Madera, charging him with trafficking large amounts of methamphetamine and fentanyl. “The team also aims to enhance joint technical and investigative actions, and organise training and capacity-building initiatives, together with prevention and awareness-raising campaigns – a 360° strategy against criminality on the dark web,” the organisation said.
Even if you’ve never visited these markets, your personal and financial data might already be there, having been leaked through a data breach. Criminals use this information for money laundering, opening bank accounts, applying for loans, and draining your finances. Most buyers and sellers use the Tor network, which hides IP addresses and locations. Doing so makes it harder for authorities to identify who’s behind a purchase or a listing. Vendors often build up reputations through ratings and reviews, just like sellers on mainstream platforms. To reduce scams, many markets also use escrow systems, where the site holds the buyer’s payment until they confirm the item has been delivered.

Access This Chapter
In collaboration with independent researchers, the firm looked at one of the more popular markets on the dark net. Lithuanian data sold on the dark net is valued at more than €17 million, while Lithuanian passports are among the most expensive in the world, according to a web security firm. The BKA did not say if any arrests were made in the takedown of the marketplace, but the securing of cash suggests physical action was conducted and that there was likely interaction with admins or others with connections to the marketplace. Those attempting to access the website are greeted with a seizure banner notifying users of the takedown. Extortion practices are allegedly prevalent within refugee and migration camps in Lithuania.

Hansa (market)
He even claims that AlphaGuard will automatically hack other websites and plant data on their servers to give users “withdrawal codes” they can use to save the cryptocurrency they’ve stored on AlphaBay in case of a takedown. “It is a system to ensure users can withdraw funds, settle disputes, and generally go without a cent lost if raids happen,” DeSnake writes, “even if it happens on all servers at the same time. It is unstoppable.” In an extended chat interview, DeSnake tells WIRED how he walked away unscathed from the takedown of AlphaBay, why he has resurfaced now, and what his plans are for the resurrected, once-dominant online black market. He communicated with WIRED via encrypted text messages, from a frequently changing series of pseudonymous accounts, after proving his identity by signing a public message with DeSnake’s original PGP key, which multiple security researchers verified. “When a dark market is taken down, everyone goes to the next one. It’s a whack-a-mole effect,” says Marinus Boekelo, one of the NHTCU investigators who worked on the Hansa operation. By secretly seizing control of Hansa rather than merely unplugging it from the internet, Boekelo says he and his Dutch police colleagues aimed not only to uncover more about Hansa’s unsuspecting users, but to deal a psychological blow to the broader dark-web drug trade.
- The Silk Road was an online black market where users could buy and sell illicit goods anonymously.
- They also recovered a large amount of data they stated would be used to take down other hackers and marketplaces.
- Law enforcement is trying but at least for the time being there is no effective way to deal with such hackers,” says Černiauskaitė.
- The commonwealth lasted more than two centuries, until neighbouring countries gradually dismantled it between 1772 and 1795, with the Russian Empire annexing most of Lithuania’s territory.
- These hidden networks provide a platform for illegal activities that include the sale of stolen data, hacking tools, weapons, counterfeit currency, and narcotics.
According to publicly available information on AlphaBay prior to its takedown, one AlphaBay staff member claimed that it serviced over 200,000 users and 40,000 vendors. Comparatively, the Silk Road dark web marketplace, which was seized by law enforcement in November 2013, had reportedly approximately 14,000 listings for illicit goods and services at the time of seizure and was the largest dark web marketplace at the time. Today, darknets are populated by a vast array of users, ranging from privacy-conscious individuals to cybercriminals, hacktivists, and nation-state actors. These hidden networks provide a platform for illegal activities that include the sale of stolen data, hacking tools, weapons, counterfeit currency, and narcotics. Dark markets, often accessed through specialized marketplaces within darknets, are breeding grounds for underground economies, where users can engage in transactions while evading law enforcement and ethical oversight.
Featured Publications
About a week ago AlphaBay, the dark web’s largest contraband marketplace, went mysteriously offline. Rumors swirled that it had run off with its customers’ money, or was down for maintenance. Mafia-style groups operating in Lithuania are involved in a range of criminal activities, including drug trafficking, tobacco smuggling, human trafficking and money laundering. While these groups previously had rigid hierarchies, many have now adopted a more flexible and decentralized structure.

In a few cases, victims were extorted for basic amenities, such as showers and the use of toilets. Perpetrators usually intimidate victims using threats of physical violence, especially in cases where victims refuse to pay money demanded. Refers to the existence of strategies, measures, resource allocation, programmes and processes that are aimed to inhibit organized crime. The state’s ability to investigate, gather intelligence, protect and enforce adherence to its rules and procedures against organized crime.
Infrastructure
“The operators of the Darknet website are particularly suspected of commercially operating criminal trading platforms on the Internet and of committing crimes against the Narcotics Act,” Germany’s Federal Criminal Police Office (BKA) said in a press release. Google was compelled to hand over user data, including names, addresses, and user activity, of YouTube accounts as part of a federal investigation, as revealed in unsealed court documents. The telecommunications company allegedly involved in a data breach a couple of years ago is back in the spotlight as data purportedly from their database has resurfaced, this time available for free. Despite the company’s denial and insistence that the data doesn’t belong to them, some cybersecurity experts believe otherwise, pointing to evidence that suggests otherwise. The criminal markets score is represented by the pyramid base size and the criminal actors score is represented by the pyramid height, on a scale ranging from 1 to 10. The resilience score is represented by the panel height, which can be identified by the side of the panel.
German Authorities Take Down Darknet Marketplace ‘Nemesis Market’

When accessing the dark web, the first step is to install a dark web-friendly browser on your computer. Unlike traditional browsers, this will route your internet traffic through an anonymizing network and mask your IP address. See how our intelligent, autonomous cybersecurity platform harnesses the power of data and AI to protect your organization now and into the future. Notably, posts offering Redline stealer logs, apopular malware family, tripled from an average of 370 per month in 2022 to1,200 in 2023.
The use of digital signatures can also help verify the authenticity of users and transactions. Nicolas Christin, a dark-web-focused computer scientist at Carnegie Mellon University, verified DeSnake’s PGP key against a copy found in his own archive of messages. But that key, he says, could be in the control of law enforcement agencies, or DeSnake himself could have become a law enforcement cooperator. After all, at the same time as AlphaBay’s 2017 takedown, the Dutch police took over and controlled Hansa, the second-largest dark web market at the time.