Part of the operation to close the Monopoly marketplace, the arrests shed light on some scary facts about the Dark Web. Namely, during the operation, the authorities seized $53.4 million in cash and cryptocurrency, 117 firearms, and 850 kg (1,874 pounds) of illegal drugs. The drugs included 258 kg (568.8 pounds) of amphetamines, 43 kg (94.8 pounds) each of MDMA and cocaine, and another 10 kg (22 pounds) of LSD and ecstasy pills. The marketplace’s founder, a man with dual Croatian-Serbian citizenship, was previously arrested and extradited to the US.
Check For Data Breaches

While stolen accounts across other categories saw year-over-year price drops, Deep Web facts reveal that crypto was up from 2022. That’s because digital currencies went stagnant between Q3 of 2022 and Q1 of 2023, resulting in less interest in buying crypto during this period. And since fewer people were investing in cryptocurrency, there were fewer new accounts to hack. Dark Web statistics show that all marketplaces had a combined daily revenue of $4.2 million shortly before Hydra was shut down in April 2022.

Darknet Markets Saw Crypto Revenues Rise In 2023 Despite Global Crackdown
We’ll continue monitoring darknet market trends in 2024, and are curious to see what new tactics markets and fraud shops may employ to find more customers. In recent years, some darknet markets and fraud shops have been integrating crypto payment processors on their websites via APIs, possibly as a way to improve operational efficiency and increase security. Essentially, these payment processors provide a white label service for darknet markets and fraud shops, and a seamless checkout experience for those services’ customers.
Of People Worldwide Don’t Understand How The Dark Web Works

Because it is anonymous, it also provides safety to drug dealers, hackers, and other criminals. Finally, besides hosting potentially disturbing materials, the Dark Web is where unassuming users can easily fall victim to malware, viruses, fraudsters, and scammers. The story of Hydra is yet another in a series of creepy facts about the Dark Web.
- The anonymity of the dark web is also a big benefit for whistleblowers submitting sensitive information to news outlets.
- If you want to buy something, deposit cryptocurrency in your wallet, and you will be charged directly.
- This applies even when the information is needed for critical procedures, such as registering for Social Security or obtaining a new driver’s license.
- The platforms, tools, actors and insights featured in this series are based on intelligence gathered from Searchlight’s extensive deep and dark web dataset.
- It’s noteworthy that, despite some unusual marketing efforts, no other darknet market has since assumed Hydra’s mantle of being the one-stop-shop for illicit products and services.
- Designed to resemble a legitimate e-commerce platform, Incognito offered a slick user experience with branding, advertising, and customer support.
Is It Illegal To Access The Dark Web?
- You can use Dread to learn which dark net markets are reputable and their locations.
- Part of the operation to close the Monopoly marketplace, the arrests shed light on some scary facts about the Dark Web.
- Despite a 2019 breach that exposed over 26 million credit cards, it continues to operate, indicating sustained trust in its data pipelines.
- The market has a wide selection of products, including drugs, digital goods, and services.
On the one-year anniversary of Hydra’s seizure, Flashpoint explores how threat actors have adapted to fill the market’s void and fuel their illicit aims—from narcotics transactions to money laundering. As with our previous reports, we gather data by scanning Dark Web marketplaces, forums, and websites. This information is then processed to generate an index of average prices for a broad range of specific products. 2022 and early 2023 saw the seizure of many major darknet markets by law enforcement. Some of the biggest markets have disappeared within just a few weeks in the latter half of 2022. As encryption, anonymity and privacy are central to the design of the darknet and its various drug markets, up-to-date information on drug trends is difficult to come by.
Russian Market has operated since 2019, specialising in stolen credentials, stealer logs, and remote desktop access. Threat reports consistently rank it among the top ten darknet sites Top 10 Dark Web Markets. Almost a year after Hydra’s takedown, five markets—Mega, Blacksprut, Solaris, Kraken and OMG!
Thus, the data’s content encourages the maintenance of cyber safety, while the availability of the set reduces barriers for such safety to be practiced. In the first section of this article, we review the context of our research and related literature. Next, we describe the data acquisition framework, including the infrastructure in place, information on the dark web landscape, and the software used to scrape sites. In the third section, we give a general overview of the data collected and a primary analysis.

Most Internet Users Rely On The Tor Browser To Access The Dark Web
Silk Road popularized the use of Bitcoin, anonymizing technologies like Tor, and vendor reputation systems. But today’s markets are more fragmented, more resilient, and harder to track. Faced with the decision between profit seeking and self preservation, Abacus’s admins likely chose the latter in light of Archetyp’s seizure and the surge in new users that elevated Abacus’s profile. Furthermore, after four years of operating and generating substantial profits, the admins likely lost motivation to continue and chose to exit the ecosystem to preserve their freedom and financial gains. Abacus’s exit follows the June 16, 2025 law enforcement seizure of Archetyp Market, marking the latest in a series of shutdowns in the Western DNM ecosystem. Since the summer of 2022, the aforementioned markets have waged war against each other, involving the spreading of rumors, the doxing of administrators and staff members, distributed denial of service attacks and breaches.
In Q1 Of 2023, Verified Crypto Exchange Accounts Sold For As Little As $70
This allows them to compile intelligence and make arrests at optimal moments. In the interim, many in the DNM community will assume the marketplace performed an exit scam and continue their activity on other platforms. Bayonet/GraveSac, and has become the preferred method for disrupting the ecosystem.

It offers counterfeit documents, financial fraud tools, hacking and malware services. It has an active forum and community along with an extensive user vetting process. It has built a reputation for being a reliable source of stolen credit card data and PII. Renowned for its extensive inventory of financial data and sophisticated operating methods, Brian’s Club is a key player in the underground economy of financial cybercrime. It is a hub for financial cybercrime and offers a wide range of illicit services and stolen data that cater to sophisticated cybercriminals. Throughout the history of the darknet market ecosystem, at different turns one marketplace has typically played the dominant role.
The takedown of Hydra market undoubtedly caused a major rupture in the Russian darknet market ecosystem. In its wake, the US has also sanctioned several mixers and risky exchanges that handled stolen funds and which had exposure to Hydra wallets. However, these developments do not mean a complete departure from darknet markets, or DNMs. Nevertheless, as long as these actors avoid arrest, the general darknet market landscape appears to be capable of healing itself.
While some of these markets were shuttered by law enforcement agencies – some took the easy way out with exit scams. Here are some of the now-defunct dark web markets that were notorious for cybercrime. WeTheNorth is a Canadian market established in 2021 that also serves international users.

Continued Challenges And The Role Of Blockchain Intelligence
Purchasing or selling illegal goods—such as controlled substances, counterfeit documents, or stolen data—can result in significant legal penalties, including fines, criminal charges, and imprisonment. Even users who access these platforms without intent to buy illegal items risk suspicion or investigation. Ransomed forum was a project of the RansomedVC ransomware-as-a-service operation, a group who gained attention in September after claiming to have hacked Sony. Allegedly aimed at actors looking to join the ransomware scene, Ransomed appeared on the dark web in October 2023, with more than 200 members joining the board in the first weeks.
Finally, as with most online accounts, fraudsters bank on the fact that many people still reuse passwords across multiple accounts, especially those they use often like Facebook. Fraudsters in possession of a hacked PayPal account can also try to double their money by using the account funds to run various well-established chargeback scams on merchants who accept PayPal. Log-ins for everyday services like Netflix and Spotify primarily offer a route into potential identity theft, since it remains so common for people to reuse their passwords. Our personal information has real value on the dark web because it can be used fraudulently in such a wide variety of ways to make a profit at your expense.
Given that these stores often operate under new names, it is difficult to assess with absolute certainty whether they were present on Hydra or just planting the reviews for publicity. However, Flashpoint’s cryptocurrency analysis performed in September 2022 found that some of the exchanges that received funds from Hydra (e.g. Bitzlato, MINE exchange, Bitpapa,) were also receiving funds from OMG! TRM Labs adds that eight of the top 10 mainstream exchanges that received funds from Hydra before its shutdown also received funds from its successor entities over the subsequent year. Every location where personal data is stored is a potential target for cybercriminals. Here are some methods to thwart unauthorized access to your data repositories. In 2022 and Q dark web markets continued to bloom with a multitude of listings of various illegal goods and services.