Other risks, such as frauds perpetrated by customers and exit scams, were considered inevitable on the dark web, but also manageable. This early detection allows organizations to identify and respond to threats quickly, reducing the chances of unauthorized access, financial loss, or damage to brand reputation. 2easy has quickly gained traction as a go-to platform for hackers looking to buy and sell databases containing breached credentials, Social Security numbers, financial records, and login details for online banking and e-commerce platforms. The market emphasizes anonymity and security, conducting transactions exclusively through cryptocurrencies like Bitcoin and Monero. FreshTools, founded in 2019, specializes in selling stolen account credentials and data, particularly webmail, RDPs (Remote Desktop Protocols), and cPanels.
Pharmacies In Mexico Are Shut As Authorities Crack Down On Fentanyl-tainted Pills
Whether you see them as cautionary tales or fascinating case studies, they’re proof that the internet, like any society, has both its main streets and its back alleys. The next big shift came with peer-to-peer networks like Napster, LimeWire, and BitTorrent. These platforms weren’t secret, but they changed the way people thought about exchanging digital goods. Suddenly, anyone could share files directly without going through a middleman.
The one which came from the UK cost about $3 per gram and was the worst hash I ever tried – a pale-black waxy substance with a little THC. I paid for the resin from the Asian country $2 per gram and was pleasantly surprised at its potency and fragrance. This is one of the oldest and most well-established single vendor markets on this list. In most cases, the vendors also have deposited large amounts for the vendor accounts. This is returned only if the vendor doesn’t scam people and isn’t reported multiple times.

Ways Agentic AI Is Transforming Cybersecurity
Inside, buyers could browse thousands of drug listings, many accompanied by reviews and ratings. The platform also featured prescription drug listings falsely marketed as authentic, and some products were outright scams—counterfeit pills advertised as legitimate pharmaceuticals. These features help establish trust between buyers and sellers, providing users with a sense of security that many other markets lack. Launched in September 2022, Torzon Market operates on the Tor network and features over 11,600 illegal products, including drugs and hacking tools. It enhances buyer transparency by importing vendor feedback with PGP proof. Torzon offers a premium account option for additional benefits and is valued at approximately $15 million, accepting payments in Bitcoin (BTC) and Monero (XMR).
The Cyber Express News
Further confounding efforts, these multiple markets are often scattered across different regions and jurisdictions, requiring significant international cooperation to drive operations. In 2025, agencies will need to deploy a combination of advanced cyber tools, including AI-driven pattern recognition, blockchain analysis, and network infiltration strategies, to track illicit activity across multiple channels. To become an Incognito Market vendor, people were required to register with the site and pay an admission fee. In exchange for listing and selling narcotics as a vendor on Incognito Market, each vendor paid 5% of the purchase price of every narcotic sold.
Perhaps it won’t be Silk Road 2.0, or even Tor Hidden Services that transform the drugs trade. Dark net markets make drugs more available more easily, and that’s nothing to celebrate. It will, I suspect, tend towards higher levels of use, which — legal or illegal — creates misery.

The vendor’s listing of a protonitazene analog boldly states that the compound has a potency 20x greater than that of fentanyl, as seen below. Once received by the buyer, the compound could be pressed into counterfeit pills, like M30s, and further distributed to end consumers. In addition to fentanyl, the presence of nitazenes in the global supply of dangerous synthetic opioids has increased, and China-based vendors have established themselves as the initial source.

Award Winning Cybersecurity

This applies in particular to foreign customers, because the order is automatically finalized before the deadline for delivery and several bad feedbacks amidst hundreds of positive ones don’t harm the business. Rookies, on the other hand, value each review and try to do their best to attract clients. Furthermore, if a new seller fails to complete at least 40 successful deals (on White House Market, WHM), he won’t get back a $400 vendor’s bond. In case a dealer gets on the list of scammers, his account will be banned, and his bond won’t be refunded.
This shift poses unique challenges for law enforcement, who must adapt traditional monitoring methods. The fragmentation of darknet markets means that law enforcement agencies can no longer focus their efforts on a few large, easily identifiable targets. Instead, they must gain access to multiple, hyper-secure markets and then regularly monitor this wide array of smaller, highly localized platforms.
With so much money floating around these sites — dealers can make good money without leaving home — some vendors try to game the review system. Common tricks include creating fake accounts from which to post positive feedback; writing bad reviews of competitors; and even paying others to give favourable write-ups. White was among several individuals in Britain who were convicted as part of the operation against Silk Road.
The chart below shows fraud shops that performed well after the UAPS takedown, indicating that the customer migration was swift, and favored longstanding, trusted fraud shops like Vclub and Bankomat. Nemesis Market also saw its demise in March, when German authorities seized its infrastructure, along with $102,000 in cryptocurrency. Although all the vendors use pseudonyms, for fairly obvious reasons, they keep the same fake name to build up a reputation. White denied he had accessed the wallet himself and told investigators he suspected someone inside the NCA had withdrawn the funds, noting the agency was holding the private keys for his wallet. By late 2021, investigators believed the lost bitcoin was untraceable and wrote off the loss.
(NOT) Lost In Translation – Why Your Language Doesn’t Matter To Cybercriminals

These platforms allow vendors to reach customers who are less technologically savvy, whilst also mitigating against market turbulence caused by darknet market exit scams or law enforcement takedowns. In this respect, the use of encrypted communication apps like Telegram and Signal have reduced the barriers to access for drug buyers to purchase products online, whilst also reducing fees that vendors pay to darknet markets for sales. This migration is further bolstered by the fact that the majority of new Western DNMs launched in 2024 have been characterized by poor design features or security issues.
Feds Dismantled The Dark-Web Drug Trade—but It’s Already Rebuilding
“My guess would be the lower-tier markets just grow in prominence again,” he says. But despite those wins, a years-long war of attrition seems to be exactly the pattern that the dark web’s booms and busts now follow, argues Carnegie Mellon computer scientist Nicolas Christin, a longtime dark web researcher. In an economy where the demand—drug-addicted users—remains constant or growing, that’s only to be expected.
As the routines and restrictions of the working day receded for millions on lockdown, buying drugs online has never been so popular, research shows. On Dread, the reactions to the recent law enforcement activity were a mix of dismay and defiance. “Are there any trustworthy markets left?” one user wrote, complaining that they used the dark web markets as a source for anti-seizure drug Lyrica and now had no good source.
Shuttered Dark Web Marketplaces
He recommends verifying market employees carefully, and to weed out law enforcement infiltration through barium meal tests. For a local machine configuration, he recommends a computer purchased for cash running Linux, using a local Tor transparent proxy. For operations security he suggests avoiding storing conversation logs, varying writing styles, avoiding mobile phone-based tracking and leaking false personal details to further obfuscate one’s identity. The Dutch national police’s Cyber Enabled Crime Team was involved in the operation, code-named SpecTor.
- Historically, DNMs have been known for the illicit drug trade, but in recent years have differentiated themselves with unique service offerings.
- A nine-count indictment was unsealed in the Western District of Tennessee charging six alleged members of a criminal street gang known as Unknown Vice Lords (UVL) – Ghost Mob with…
- The US and Europe have seen an increase in nitazine-related overdose deaths in recent years, perhaps due to the halt in the heroin supply following the Taliban’s crackdown.
- For example, in November 2023, an undercover law enforcement agent received several tablets that purported to be oxycodone, which were purchased on Incognito Market.
- We’ll also explore how you can safeguard your organization against cyber threats by proactively monitoring illicit vendors and their activity on the dark web.
- Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below.
Partners And Cooperation
Discover crucial dark web statistics, trends, and emerging threats to stay ahead of cybercrime in this fast evolving digital era. With these stolen credentials, the suspects purchased ghost gun parts and tools from a variety of legitimate websites, which they used to build ghost guns with a 3D printer, and sell for cash. A Manhattan district attorney successfully used this evidence to bring charges against one of the suspects. In addition to various benzodiazepines, stimulants, and psychedelics, one longstanding China-based research chemical manufacturer also sells nitazenes.
To help keep buyers anonymous, other developers have created “tumbling” services, which are a sort of micro-laundering system that obscures who is sending Bitcoins to whom. Then, in April 2014 “Grams”, a search engine for these drugs sites, was launched and included “trending” searches and advertising space. One of the key factors driving this shift is the increased focus on security. Boutique dark markets are implementing stricter security measures, including better encryption and multi-layered protections, to safeguard transactions. Buyers and sellers are often subject to vetting processes that reduce fraud and scam risks, making these platforms more reliable and secure for customers.
By uprooting on the darknet markets, governments frustrate easy access to deadly drugs trade and reduce generalized trust in darknet markets. HSI New York leads and directs all operational and administrative activities of the El Dorado Task Force (EDTF). The EDTF is the premier money laundering task force in the nation and is comprised of more than 200 law enforcement personnel representing approximately thirty-five (35) federal, state, and local law enforcement and regulatory agencies. The EDTF encompasses a standalone Cyber Division as part of an effort to stay abreast of emerging criminal threats and in keeping with current and future investigative priorities. The mission of the EDTF is to disrupt, dismantle, or render ineffective, organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes.