Within weeks, Hydra-branded channels appeared offering drugs, stolen data, and counterfeit documents. Researchers tracking these groups noted that Telegram’s broadcast and bot features allowed operators to recreate the functionality of darknet forums almost overnight. Law enforcement in Russia and Germany confirmed that Hydra affiliates were using Telegram bots to automate sales, effectively replicating market infrastructure in a mobile app. JCODE is an FBI-led Department of Justice initiative, which supports, coordinates, and assists in de-confliction of investigations targeting for disruption and dismantlement of the online sale of illegal drugs, especially fentanyl and other opioids. JCODE also targets the trafficking of weapons and other illicit goods and services on the internet.
The website was a bastion of cyber-crime, surviving for more than six years selling drugs and illegal goods. Investigators seized the Nemesis Market platform’s server infrastructure in Germany and Lithuania on Wednesday, as well as cryptocurrency worth 94,000 euros ($102,000), Germany’s Federal Criminal Police Office said in a joint statement with Frankfurt prosecutors. Authorities seized €7.8 million in assets and arrested eight individuals across five countries during coordinated raids. The darknet is a part of the internet hosted within an encrypted network and accessible only through specialized anonymity-providing tools, most notably the Tor Browser.
Europol Leads International Takedown Of Longest Running Darknet Market Archetyp
- Transactions are carried out with the help of a cryptocurrency such as Bitcoin and dark wallets, which protect both the buyer and the seller.
- The scale of its operation puts it on a similar level to the dark web’s previous marketplace monopolizers such as Dream and Silk Road.
- The torch passed to dedicated darknet forums, often on the Tor network, which allowed marketplaces and vendor reputation systems to emerge.
- Notably, the proportion of newly launched marketplaces that accept only Monero, a privacy-focused cryptocurrency, rose sharply from just over one-third in 2023 to nearly half in 2024, highlighting a growing shift toward obfuscation and anti-surveillance tactics among darknet operators.
- These digital helpers usually operated anonymously and distributed worldwide – but during Operation “Deep Sentinel”, they too were unmasked.
The police are still unable to access two of his Bitcoin wallets and are therefore unable to see the balances. In his childhood bedroom, with neatly stacked drugs organized on shelves around the room. The arrest followed a pickup from a 51-year-old courier that Maximilian met in a parking lot near his apartment in Leipzig.
US And Five Global Partners Release First Unified OT Security Taxonomy

But their expensive campaigns are no more effective than a traditional shakedown on a bunch of dealers on one street corner in one city. The biggest takedowns in terms of volume – Silk Road, AlphaBay and Wall Street – have been police-led, but in 2018, the EMCDDA published a study which found that, of the more than 100 markets, just 10 percent closed as a consequence of overt police action. But it is hackers demanding ransom money, not police, that’s the main worry for those operating DNMs, says Patrick Shortis. “The biggest source of disruption to markets is currently coming from the ongoing distributed denial of service DDOS attacks that have knocked markets and forums offline intermittently over the last few months,” he says.
FBI, Dutch Cops Seize Fake ID Marketplace That Sold Identity Docs For $9
Such signatures are intended to confirm that vendors still have access to their accounts and have not been arrested or compromised. While the method has its limitations, HugBunter argued that failure to provide a cryptographic signature alongside continued account activity could be telling. On the Reddit-style dark web forum known as “Dread,” users are trying to determine which vendors were compromised by the operation, Straight Arrow News found. The dark web is a collection of sites that are not indexed by search engines and can only be viewed with specialized web browsers designed to provide privacy and anonymity. Many sites specialize in selling illegal goods that are not readily available on the public internet.

The Booming Bitcoin Business
The ultimate goal of sanctions is not to punish, but to bring about a positive change in behavior. For information concerning the process for seeking removal from an OFAC list, including the SDN List, please refer to OFAC’s Frequently Asked Question 897 here. For detailed information on the process to submit a request for removal from an OFAC sanctions list, please click here. Police searches led to the confiscation of 165,000 euros in bitcoins, cash and bank deposits. Under the domain , which has been shut down, the three men were alleged to have run an online portal selling downloads of e-books, audio books, newspapers and magazines for as little as a few cents. Separately, local German news “Westfälische Rundschau” quoted IT researcher Karsten Zimmer as claiming that he sent Europol critical evidence after examining the computer of an employee of a company.
US: Maryland Confirms Cyber Incident Affecting State Transport Systems
The Justice Department said its investigation was ongoing and investigators were still working to identify other individuals behind darknet accounts. A wild detail spotted in an online real estate listing by internet sleuths has sparked a major police operation — only for the mystery to deepen. After raiding the premises, police realised the scale of the operation seizing 320kg of various drugs, $A70,000 in cash, $A50,000 in bitcoin, a dozen phones and two dozen SIM cards. While darknet demand may not disappear, making supply lines more fragmented and risky raises costs and slows distribution — both of which reduce harm. The Dutch national police’s Cyber Enabled Crime Team was involved in the operation, code-named SpecTor. One defendant in California led an organization that bought fentanyl in bulk, pressed it with methamphetamine into pills and sold millions of them to thousands of people on the dark web, he said.

US Imposes Sanctions On Powerful Mexican Cartel Linked To Drug Trafficking
Authorities from six nations—Germany, the Netherlands, Romania, Spain, Sweden, and the US—joined forces under Operation Deep Sentinel to dismantle Archetyp Market. The coordinated law enforcement actions took place between June 11 and 13, involving roughly 300 officers. The infrastructure was dismantled in the Netherlands, while arrests spanned Germany, Spain, and Sweden, including the suspected administrator—a 30-year-old German national arrested in Barcelona. Archetyp Market operated as a drug marketplace for over five years, amassing more than 600,000 users worldwide with a total transaction volume of at least €250 million. With over 17,000 listings, it is one of the few darknet markets that allowed the sale of fentanyl and other highly potent synthetic opioids, contributing to the growing threat posed by these substances in Europe and beyond. Archetyp Market quietly emerged on the dark web in May 2020 and quickly became a dominant force in illegal narcotics distribution.
McDonald purchased bulk quantities of fentanyl and cocaine and then directed others to complete hundreds of drug sales involving large quantities of both fentanyl and cocaine. The longest-standing dark web drug market worth £200million has been dismantled following a years-long investigation with its alleged mastermind arrested in Barcelona. The United States saw 153 arrests as part of the international operation, followed by the United Kingdom, with 55, and Germany, with 52, according to the European Union law enforcement agency Europol, which coordinated it. In Europe, Germany is among the top three biggest markets for drugs, next to the UK and the Netherlands, and they have a lot of darknet markets operating in the country. People from all walks of life partake in recreational drugs, whether it be to relax or because they want to chase a high.
- Our goal is to provide trustworthy information for the public, media, and policymakers.
- “On Thursday, February 29, 2024, a total of 102 search warrants were executed nationwide at the same time in the evening,” a police notice read.
- Since the takedown of Nemesis, Parsarad has discussed setting up a new darknet marketplace to take the place of Nemesis with vendors that were once active on the marketplace.
- One defendant in California led an organization that bought fentanyl in bulk, pressed it with methamphetamine into pills and sold millions of them to thousands of people on the dark web, he said.
- The site’s infrastructure, hosted in the Netherlands, was taken offline during the operation.
Cyber Press

Vendors migrated to unstable alternatives such as Incognito and Bohemia, but none of these managed to consolidate trust or operational continuity. Today’s action, taken pursuant to Executive Order (E.O.) 14059, which targets proliferators of narcotics and their means of production, underscores the United States’ commitment to combatting all means of supplying narcotics to the United States. Treasury remains focused on the risks posed by darknet marketplaces, as highlighted in previous designations of Genesis Market on April 5, 2023, and of Hydra Market on April 5, 2022. Nevertheless, after Dream closed, the launch in July by an ex-Dream admin of a successor called Samsara has not yet gained huge traction; perhaps as users are suspicious that it could be a police-operated honeytrap – a strategy deployed by investigators at the time of the Alphabay takedown. When cops shut that site, they knew users would migrate to any service they could – and many fed to Hansa market, which the cops had seized and allowed to continue operating so they could capture user data. Just seven weeks after a widely publicised, all-out assault by international investigators on darknet markets – and their supporting infrastructure of review sites and bulletin boards – the entire drug-dealing cryptomarket ecosystem is today operating just as it was before.
Operation RapTor: The Largest Darknet Takedown In History

“For example, fake purchases are made on the drug platforms in order to obtain further investigative leads from the packages sent,” the public prosecutor reveals. BKA’s announcement says investigations into Nemesis Market started in October 2022, involving German, Lithuanian, and American agencies, including the FBI, Drug Enforcement Administration (DEA), and the Internal Revenue Service Criminal Investigation (IRS-CI). “A total of at least 320,000 transactions were carried out via the marketplace, with more than 4,650 Bitcoin and 12,800 Monero – two of the most common cryptocurrencies – changing hands,” Oldenburg authorities added. Nemesis was founded in 2021 and has been growing rapidly since then, according to the BKA. “The investigation to bring to justice the administrators of and vendors on Nemesis Market continues,” a spokesperson for the U.S. Many of the closures have come from criminals choosing to gradually bring their operations to a close, and disappear with their riches.
Scale And Reach Of Archetyp Market
Europol will continue working with our partners to make the internet safer for everyone.” One key moderator and six top vendors — some responsible for thousands of drug shipments — were arrested in Germany and Sweden. In total, the operation led to the seizure of 47 smartphones, 45 computers, large quantities of drugs, and assets worth €7.8 million.

