Beyond drugs, there are now ever-growing examples of generative AI being used for sexual deepfakes across schools and even of public figures, including the recent case of NRL presenter Tiffany Salmond. In fact, it is routine for individual’s participating in these dark web communities, par for the course of engaging in the markets. Usually these products are sent to the buyer by post and money transferred to the seller through the escrow system. The United States saw 153 arrests as part of the international operation, followed by the United Kingdom, with 55, and Germany, with 52, according to the European Union law enforcement agency Europol, which coordinated it. Listings included offerings of prescription medication that was falsely advertised as being authentic. For example, in November 2023, while operating in an undercover capacity on Incognito Market, a law enforcement agent purchased and received several tablets purported to be oxycodone.
With nearly 292,000 members, RuTor is the largest DNM on the Russian-speaking dark web. The forum statistics panel also notes how the forum hosts over 2.2 million user posts scattered across 37,310 unique topics to date. Rival DNMs then began launching ‘black PR’ campaigns against one another, they even resorted to DDoSing each other during last summer, with competitors disrupting OMG! On one side, allegedly RuTor operators hacked its largest competitor, WayAway.
- Numerous drug shops operate in major cities including Kiev, Lviv, Kharkov.
- A new, Reddit-style forum site called Dread, hosted on a Tor hidden service, has already replaced the seized DeepDotWeb as a community hub, where users discuss which site to use when one is taken down by police or turns out to be run by scammers.
- In both cases, this activity is coming from cybercriminal or semi-criminal elements, which are likely driven not just by their personal interest, but the direction from a third-party.
- In many countries, strict laws limit who can legally buy, own, or carry firearms.
- The dark web itself is not illegal, but it’s largely connected with unscrupulous and illegal operations.
- The arrest of Telegram’s founder, Pavel Durov, in August 2024 triggered a notable shift in the operational dynamics of the platform’s drug vendors.
Investigators received leads from local police departments investigating overdose deaths, including that of a 19-year-old man in Colorado who loved learning languages and building his own computers, according to FBI Deputy Director Paul Abbate. One defendant in California led an organization that bought fentanyl in bulk, pressed it with methamphetamine into pills and sold millions of them to thousands of people on the dark web, he said. He recommends verifying market employees carefully, and to weed out law enforcement infiltration through barium meal tests. One of the biggest problems cybersecurity teams face isn’t a lack of tools — it’s too many alerts.
Association Of Drugs For Sale On The Internet And Official Health Indicators: Darknet Parsing And Correlational Study
Often portrayed as the internet’s shadowy underbelly, the Dark Web hosts marketplaces offering everything from privacy tools and digital currencies to more questionable, or outright illegal, products and services. The main drug sold online is cannabis, followed by synthetic drugs, cocaine and, to a lesser extent, opioids. However, the extent to which each drug relies on digital markets varies. Synthetic drugs show a higher proportion of sales on the darknet and in online shops than other drugs, while cannabis and cocaine are more likely to be obtained through social media, largely because of their partial legality and social acceptability. Heroin and other opioids do not have a significant presence online, as their sale is highly regulated and controlled. A user’s choice of platform thus usually depends on the type of drug sought.
HugBunter, the anonymous user who founded the forum in 2018, asked “market admins, vendors, and other service operators” to provide “proof-of-life” by signing posts with what’s known as a PGP encrypted signature, a form of cryptographic proof. From June 11 to 13, the agency said, a series of coordinated law enforcement actions targeting the platform’s administrator, moderators, key vendors and technical infrastructure took place across Germany, the Netherlands, Romania, Spain and Sweden. Darknet marketplaces remain central to illicit trade in 2025, with evolving business models, payment systems, and law enforcement responses. This survey highlights active and recently shuttered markets with actionable metrics and intelligence for threat hunters, CISOs, and red team leaders.
State AGs Sue 23andMe Over Auction, Say Don’t Sell Customer DNA
It’s been a constant back-and-forth between cybercriminals and law enforcement, with each new site trying to be smarter and more secure than the last. Today’s cybercriminals spread their activities across multiple platforms, making them harder to track and shut down. If you’re using a browser like Tor and visiting .onion websites that aren’t accessible through regular search engines or browsers, you’re likely on the dark web.
The health-related data were obtained from official published sources—statistical yearbooks. Maps, diagrams, correlation matrixes, and applied observational statistical methods were used. Digital drug marketplaces demonstrate remarkable resilience in the face of legal action. When sites are shut down, vendors and purchasers simply switch to another platform, ensuring that trade remains relatively uninterrupted. To combat online drug trafficking, states are introducing new laws, enforcement measures and digital reforms.
Emerging Darknet Marketplaces Of 2025 Anatomy Tactics & Trends
With an estimated market value of around $15 million, it has grown into a massive hub for cybercriminal activity. A dark web market is a hidden online platform where users can anonymously buy, sell, and trade illegal or sensitive items. Such markets are typically accessible through the Tor network, which anonymizes traffic by routing it through multiple relays and encrypting each layer. This encryption makes attribution and tracking more difficult for authorities and cybersecurity professionals. The other emerging issue is that current policing efforts treat dark web markets as the core threat, which might miss the wider landscape of digital harms.
Discover Content
Between 2021 and 2024, Nemesis Market processed more than 400,000 orders, including more than 60,000 orders in 2022 and more than 250,000 orders in 2023. Of these, more than 55,000 orders were categorized as stimulants, which included sub-categories for methamphetamine, cocaine, cocaine base (crack), and other controlled substances. More than 17,000 orders were categorized as opioids, which included sub-categories for fentanyl, heroin, and oxycodone.
US Imposes Sanctions On Powerful Mexican Cartel Linked To Drug Trafficking
Notably, one of the main target markets of Legalizer Marketplace – Ukraine. Numerous drug shops operate in major cities including Kiev, Lviv, Kharkov. Around November 2022 the Administrator of WayWay started a new thread about the planned launch for a new marketplace called Kraken. Notably, the Administrator of WayWay has exactly the same alias (aka “Kraken”) who described the news of decentralized infrastructure having multiple data centers and nodes for the new project.
- While this topic may seem distant for most people, understanding how these spaces operate is crucial.
- The fallout for victims whose data is stolen and sold can be devastating.
- This marketplace focuses on selling stolen financial data, such as BINs (Bank Identification Numbers), RDP/VDS access, and verified crypto accounts for money laundering.
- Examples include the sale of high-quality products with low risk for contamination (including lacing and cutting), vendor-tested products, sharing of trip reports, and online discussion of harm reduction practices.
- Authorities seized assets valued at 7.8 million euros, including cryptocurrency and luxury goods, and deployed around 300 officers across multiple countries during the operation.
Recognize & Report Crime
Additionally, many markets now implement multi-signature escrow systems, which protect both parties by holding funds until the transaction is confirmed as successful. As the demand for pharmaceuticals and recreational substances grows, darknet markets are expected to expand their offerings, incorporating innovative features such as AI-driven product recommendations and blockchain-based dispute resolution systems. These advancements will further solidify their position as a secure and reliable option for users worldwide. Launched after the takedown of AlphaBay in 2021, Abacus Market has rapidly risen to prominence.
Illicit And Risky Use-Cases
In both cases, this activity is coming from cybercriminal or semi-criminal elements, which are likely driven not just by their personal interest, but the direction from a third-party. Still, the disruption of Hydra dealt a “huge blow“ to the ecosystem, according to multiple sources on the Dark Web. Cryptocurrencies, while offering enhanced privacy, also present significant risks.
Privacy-focused operators are shifting to Monero due to its default anonymity, compared to Bitcoin’s transparent ledger Darknet markets see BTC inflow drop to $2B. Abacus Market was launched in 2021 and now lists over 40,000 illicit goods, including hacking tools, counterfeit documents, and listings for drugs. In 2024, it recorded on-chain revenue of $43.3 million, a 183 per cent increase, driven by vendor migrations post-shutdown of competitors, according to Chainalysis’ 2023 market report Darknet revenue in 2023.
Investigations
Overall, dark-web marketplaces in 2025 are more sophisticated, secure, and resilient than ever before, evolving rapidly in response to both technological advancements and intensified scrutiny from global law enforcement agencies. Transactions within these marketplaces typically leverage cryptocurrencies—most commonly Monero, Bitcoin, and privacy-centric digital currencies developed specifically to enhance transaction anonymity. Monero, in particular, has become the preferred cryptocurrency on the dark web in 2025 due to its advanced privacy mechanisms, which obscure transaction histories and wallet balances from public view.
Founded in 2020, Cypher Market has carved out a niche on the dark web by focusing on cybercrime products. But those of us who have studied this space for years weren’t surprised. The operation resulted in the seizure of 50.8 million euros ($53.4 million) — in cash and virtual currencies, nearly 1,900 pounds of drugs and 117 firearms in a series of raids in several countries.
