Incognito Market sold illegal narcotics and misbranded prescription medication, including, heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine and alprazolam. Lin operated the market under the online pseudonym Pharoah or Faro. The Justice Department appreciates the cooperation and significant assistance provided by law enforcement partners in the British Virgin Islands, Germany, Lithuania, and Türkiye. According to OFAC, Nemesis Market facilitated the sale of nearly $30 million worth of drugs between 2021 and 2024. In addition, Parsarad is also charged with money laundering conspiracy for both using proceeds to promote illegal drug dealing and for offering money laundering services through Nemesis Market by mixing cryptocurrencies used to pay for goods and services to obscure their origins. According to the now-deleted snapshot of stolen data, one source of Gravy’s location data is an app helping tens of millions of gay men connect with one another.
Recent News
Postal Inspection Service Chicago Inspector in Charge Ruth Mendonça. Attorney for the Northern District of Illinois Morris Pasqual, FBI Chicago Special Agent in Charge Robert W. It should force us to think about where harm is really happening online and whether current strategies are looking in the wrong direction. These closures bind users together and foster a shared resilience and collective experience in navigating these environments. These are communities stretched across dark and surface web forums which develop shared tutorials and help one another adapt to any new changes. McDonald purchased bulk quantities of fentanyl and cocaine and then directed others to complete hundreds of drug sales involving large quantities of both fentanyl and cocaine.
By 2025, agencies also use dark web search Engines and honeypots to infiltrate markets. WeTheNorth is a Canadian market established in 2021 that also serves international users. BidenCash’s rapid rise and focus on financial data make it a significant concern for cybersecurity professionals.
- Russian Market has consistently remained one of the most popular and valuable data stores on the dark web.
- All of this has made it one of the most reliable markets still active in 2025.
- HSI New York leads and directs all operational and administrative activities of the El Dorado Task Force (EDTF).
- Some of the identified underground marketplaces hide the exact number of users revealing only the number of sellers and shops registered on them, that’s why in such cases we used other available sources and assumptions to estimate it.
Silk Road 20

The dark web marketplaces are mainly defined into two categories. Community consensus and users close to the Abacus team ruled out an FBI operation as a likely reason, leaning more towards an exit scam explanation for the sudden takedown of the platform. Blockchain intelligence firm TRM Labs reports that Abacus shutting down so abruptly has all the indications of either an exit scam or a covert law enforcement operation dismantling the activity. In total, law enforcement officers seized 47 smartphones, 45 computers, narcotics, and assets worth €7.8 million from all suspects during Operation Deep Sentinel. The U.S. government traced and seized the stolen Bitcoin.
Takeaways From Trump's Second Inaugural Address
TRM Labs reports that the market had enabled transactions of nearly $100 million worth of Bitcoin but the figure does not include Monero (XMR) cryptocurrency, which requires special conditions to track and accounts for at least two-thirds of all transactions on Abacus. Historically, there have been “silent” takedowns that weren’t accompanied by announcements from the authorities, to allow investigations to continue unobstructed and gather more incriminating evidence or identify accomplices. Police disrupts Rhadamanthys, VenomRAT, and Elysium malware operations
Sam Bankman-Fried’s Parents Are Looking Into Trump Pardon: Report
CACI’s DarkBlue Intelligence Suite is designed to address these exact challenges, offering comprehensive monitoring and analysis of the dark web’s most secure and decentralized spaces. This “market cannibalization” has further destabilized the landscape, pushing vendors and buyers to seek refuge in smaller, more secure spaces. Cybersecurity researchers have uncovered a dangerous tool causing a stir on the dark web and within It helps us stay more vigilant, better protect ourselves, and make informed decisions online. It blends illegal trade with extra features like gambling, all while maintaining a clear and accessible structure.
The market is especially well-known for providing access to freshly compromised data, often obtained from recent breaches and stealer logs. BidenCash, established in 2022, is notorious for its involvement in selling stolen credit card information and personally identifiable information (PII). The market emphasizes anonymity and security, conducting transactions exclusively through cryptocurrencies like Bitcoin and Monero.
ICE Fallen Officers
FreshTools, founded in 2019, specializes in selling stolen account credentials and data, particularly webmail, RDPs (Remote Desktop Protocols), and cPanels. Unlike many other dark web markets, Cypher does not require buyers to deposit cryptocurrency upfront, which reduces the risk of exit scams. The marketplace requires merchants to pay fees to sell their products, helping ensure a certain level of quality control. It allows vendors to sell without registration, which provides an added layer of anonymity, making it one of the more flexible and user-friendly markets on the dark web. The market is also known for its listings related to financial fraud, such as phishing tools and stolen credit card information.

CMMC Compliance Made Practical: A Data-first Path Forward
In addition, they have a referral and reward system, so if you bring in more users, you get a share. Each of these “bots” represents a compromised device, and prices for access range from $3 to $10, depending on the quality and freshness of the data.However, it works by invitation only and is accessed through several mirrors on the Tor network. Despite some occasional service issues, Russian Market remains a favorite among cybercriminals seeking fresh access and financial data. It supports PGP encryption, two-factor authentication (2FA), alerts against fake sites (antiphishing), and a verification system for sellers. Today, they are still active and have evolved considerably in terms of security and sophistication. Kidney transplants, which account for most black-market organ sales, require precise HLA (human leukocyte antigen) matching to reduce the risk of immune-mediated rejection.

Experts expect the vacuum to be filled by smaller rings, but warned that Hydra’s end proves no market, however entrenched, is untouchable. Millions in crypto were recovered, and top Russian vendors and buyers were exposed to investigators. Servers were seized in Germany and cryptocurrency wallets frozen 543 BTC, €23M. Dozens of Dream Market drug dealers were nabbed e.g. a U.S. heroin syndicate. As Europol’s Rob Wainwright noted, users flocked to Hansa expecting refuge, only to be swept up in a trap. When AlphaBay went offline on July 4, many fleeing users migrated to Hansa which was by then run covertly by police.
Articles categorized as "left" provide more commentary on societal impacts, such as links between the marketplace and organized crime in Sweden, or focus on harm caused by synthetic opioids. Archetyp Market facilitated a reported minimum of 250 million euros (about $290 million) in drug transactions over five years, with over 600,000 users, 3,200 vendors, and 17,000 listings. HugBunter, the anonymous user who founded the forum in 2018, asked “market admins, vendors, and other service operators” to provide “proof-of-life” by signing posts with what’s known as a PGP encrypted signature, a form of cryptographic proof. On the Reddit-style dark web forum known as “Dread,” users are trying to determine which vendors were compromised by the operation, Straight Arrow News found.

It has gained a reputation for being a reliable source of high-quality data for cybercriminals. Due to its extensive inventory and reputation for reliability, Brian’s Club has maintained a significant presence on the dark web. Its focus on financial fraud and high-value transactions has attracted a dedicated user base, contributing to its growing reputation and market value. The takeaway is that big darknet busts now require synchronized international action. Operation Bayonet was the 2017 joint law enforcement effort that took down AlphaBay and Hansa.
Trump Offers Long-promised Pardons To Some 1,500 January 6 Rioters

This suggests that law enforcement responses to cryptomarkets result in continued security innovations, thereby making markets more resilient to undercover law enforcement efforts. In April, TheRealDeal, the first open cyber-arms market for software exploits as well as drugs, launched to the interest of computer security experts. From late 2013 through to 2014, new markets started launching with regularity, such as the Silk Road 2.0, run by the former Silk Road site administrators, as well as the Agora marketplace. The website was known for its illegal drug marketplace, among other illegal and legal product listings. Operating since 2020, 2easy Market is a dark web marketplace known primarily for its focus on stolen data and cybercrime services, particularly targeting compromised accounts and personal information.