Freshtools was established in 2019 and offers various stolen credentials, accounts, and host protocols like RDP. It is considered a go-to site for malware purchasing, providing keyloggers, trojans, and other Malware as a Service products. Established in 2022, WizardShop is one of the biggest data stores on the dark web, focusing mainly on carding and financial data.
The replacement sites often take a considerable time to build up to the same vendor-customer base,” he said. Since 2020, 2easy has sold massive stealer logs with sensitive data like passwords, bank cards, and initial access credentials. It supports operations in multiple languages and operates on both clearnet and Tor. This article reveals the top 10 dark web markets dominating in 2025, their unique characteristics, and the critical implications for enterprise cybersecurity. The arrest of Telegram’s founder, Pavel Durov, in August 2024 triggered a notable shift in the operational dynamics of the platform’s drug vendors.
Still, the disruption of Hydra dealt a “huge blow“ to the ecosystem, according to multiple sources on the Dark Web. HSI is a worldwide law enforcement leader in Darknet and other cyber-related criminal investigations. The DHS Cyber Crimes Center (C3) combats cybercrime, online child sexual exploitation, and criminal exploitation of the internet with state-of-the-art forensic technology. The Center investigates large-scale cybercrime threats and provides expertise on cybercrime investigations to the field. It also uses global law enforcement networks, like Europol, to combat cybercrime threats. Operation RapTOR includes law enforcement actions taken by JCODE member agencies, to include ICE HSI; the DEA; FBI; FDA-OCI; IRS-CI; and USPIS; in addition to foreign partners listed below.
This nonparametric approach was chosen because it can distinguish between linear and non-linear connections, giving the data a more nuanced perspective. In the next step, we have meticulously gathered official data on Russian regions from the Ministry of Health of Russia, police reports, court reports, and the prison system 27. Figure 1 presents the comprehensive cycle of collecting, modifying, and analyzing data at every step, ensuring the utmost accuracy and reliability. The pathway of the data collection, cleaning, transforming, classifying by drug type, and disaggregating by the regions is presented in Figure 1. Users of the dark web employ technology to obfuscate their identity, including the Tor browser, which routes users through multiple relays to hide their locations and IP addresses.
The Invisible Majority: People Whose Drug Use Is Not Problematic
While there is a long history of connections between drugs and weapons, DarkOwl analysts were curious if a similar relationship could be observed between weapons and human trafficking, and drugs and human trafficking. By performing a keyword and language correlation analysis across drugs, weapons, and human trafficking related advertisements in DarkOwl Vision, our analysts discovered at least 7 unique vendors who are involved in human trafficking are also involved in drug trafficking activities. A darknet marketplace claiming to be affiliated with CJNG discovered by DarkOwl analysts offers drugs for sale. CJNG is one of the strongest cartels currently operating in Mexico, and would require weapons to maintain their drug trafficking routes and control. Some of the darker illicit goods and services able to flourish on the darknet due to its anonymity and privacy-centric nature include pornography, such as child sexual abuse material (CSAM), human trafficking, and the exploitation of humans both online and in the physical world. Criminals and traffickers have increasingly turned to the online cybersphere to exploit victims.
Recognize & Report Crime
The story of dark web marketplaces kicks off with Silk Road, launched in 2011. It was the first big site where people could anonymously buy drugs using Bitcoin, and it gained a lot of attention, until it was shut down by the FBI in 2013. Despite growing crackdowns from law enforcement agencies, the dark web remains a hotbed of criminal activity, offering everything from drugs to stolen data.
Data Availability Statement
Regulatory bodies, law enforcement agencies, and private sector partners must continue to adapt, innovate, and cooperate to outpace increasingly sophisticated threat actors. Central to this effort is the use of advanced blockchain intelligence tools, which provide critical insights for tracing illicit transactions, identifying threat actors, and supporting enforcement actions. The progress made in disrupting illicit networks demonstrates the impact of collective action, but sustained vigilance and adaptability — empowered by cutting-edge blockchain analytics — will be essential to securing the crypto ecosystem in the years ahead.
- To answer this question, I have analyzed drug pricing policies and calculated the profit, which can be generated by vending marijuana on Hydra and White House Market (WHM).
- Cryptocurrency-enabled online sales of illicit drugs saw a year-on-year growth of over 19% between 2023 and 2024, nearing USD 2.4 billion.
- In a Vice documentary on drug sales on social media, it took the host just five minutes to connect with a dealer in London.
- A darknet marketplace claiming to be affiliated with CJNG discovered by DarkOwl analysts offers drugs for sale.
Keeping to the trend witnessed in 2023, Russian-language darknet marketplaces continue to be responsible for the vast majority of revenue generated, contributing over 97% to the overall volume of illicit drug sales (up more than 1% from 2023) in bitcoin and TRON. Over the last year, the online illicit drug trade has continued to decentralize away from darknet markets and towards encrypted chat and social media platforms. This trend, already prevalent in Western communities, has been increasingly seen in the Russian-language ecosystem as well. The earliest modern online anonymous markets, often referred to as darknet markets or cryptomarkets, appeared in early 2010, and evolved from an encrypted email service and migrated on to a Tor (The Onion Router) anonymity network to guarantee better anonymity to users.
Regarding profits, darknet vendors do not have to limit their trading to face-to-face interactions, and can instead sell drugs to a potentially worldwide customer base. We took only “zakladka” with a small weight of substances ready for sale (5 g) because larger supplies can be resold on the same Hydra marketplace by other drug dealers so that they could be counted twice. The map in Figure 3 illustrates the daily supply volumes of total amounts of drugs, measured throughout the year and brought to average. In the next step, a comparative analysis across different Russian regions was performed to understand the variations in drug trade patterns.
- Believe it or not, some dark web marketplaces have pretty advanced systems for building trust.
- Federal Bureau of Investigation (FBI), as well as collaborations between multiple agencies on an international level, have focused on human intelligence and technology to infiltrate and target customers consuming and disseminating criminal products on the dark net.
- With so much money floating around these sites — dealers can make good money without leaving home — some vendors try to game the review system.
- Its commitment to privacy, diverse product offerings, and robust security measures make it a preferred choice for users seeking discreet transactions within the darknet.
- Sellers often need to pay a deposit to prove they’re serious, and they build their reputation through positive reviews.
Haitians Give Cautious Welcome To New International Force Approved By UN To Tackle Gangs
They only included samples that were purchased in-person or on dark-web cryptomarkets, excluding samples that participants simply stated were from “the internet.” In total, 62,596 drug samples met these criteria. The whole idea just seems so sketchy to me and it seems pretty easy to get caught I know police are after the sellers not the buyers but still I’d be too paranoid to buy drugs off the internet. The arrests were part of an effort by federal authorities to address “the growing number of illicit vendors operating on the darknet providing large quantities of harmful substances to thousands of people across the United States,” according to the Justice Department. Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users. The darknet cannot show the full extent of the complicated relationship between arms, drugs, and human trafficking.
Official Statistics Data
Investigators received leads from local police departments investigating overdose deaths, including that of a 19-year-old man in Colorado who loved learning languages and building his own computers, according to FBI Deputy Director Paul Abbate. One defendant in California led an organization that bought fentanyl in bulk, pressed it with methamphetamine into pills and sold millions of them to thousands of people on the dark web, he said. One defendant in California led an organization that bought fentanyl in bulk, pressed it into pills with methamphetamine and sold millions of pills to thousands of people on the dark web, he said.
On the contrary, alternative marketplaces have developed to replace the Silk Road, including Libertas Market, Wall Street Market, Dream Market, Berlusconi Marketplace, and many more. In addition to Empire Market’s more than 18,000 drug listings, another site called Nightmare Market now lists 28,000 drug products, along with the dark web’s usual assortment of stolen credit card numbers, counterfeits, and hacking tools. A new, Reddit-style forum site called Dread, hosted on a Tor hidden service, has already replaced the seized DeepDotWeb as a community hub, where users discuss which site to use when one is taken down by police or turns out to be run by scammers. Antonio Tirado, 26, and Jeffrey Morales, 32, of the Bronx, New York, were arrested on June 18, and separately charged by the U.S.
Silk Road And Early Markets
This dramatic increase may reflect the decentralization of the drug trade away from traditional darknet markets, as vendors grow more adept at operating across multiple platforms on both the clearnet and darknet — including e-commerce websites and social media platforms. The use of online platforms for selling synthetic drugs has expanded and diversified over the past years and provided criminals with an efficient way to advertise their products and reach their customers, as well as methods to effectively disguise their illegal business. Such platforms have also helped to professionalise drug selling through advertising the products with detailed descriptions, pictures, availability information, deals and discounts as well as developing an online reputation among customers.
What Types Of Marketplaces Can You Find On The Dark Web?
We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. While some of these markets were shuttered by law enforcement agencies – some took the easy way out with exit scams. Here are some of the now-defunct dark web markets that were notorious for cybercrime. WeTheNorth is a Canadian market established in 2021 that also serves international users.
In response, social media companies’ algorithms to detect drug-selling behavior are getting smarter and are aggregating images and emojis, Fuller says. “There is an understanding that seeing these ads on social media is correlated to a decreased risk perception, and young people are led to think the drugs are safer.” Of the teenagers she sampled, 10 percent reported purchasing drugs via social media. “Those exposed to drug ads were 17 times more likely to purchase drugs on social media compared to those who had not seen such ads,” she adds. Market URLs change rapidly nowadays on the dark web, to escape malicious hacking by blackmailers.
Archived Content
The supply of cannabis is about 10 times higher than opiates in terms of weight on the market. A single study can’t definitively prove whether the dark web offers a safer supply. But these results suggest that, while some substances were indeed less likely to be adulterated, purchasing there is not a silver-bullet harm reduction strategy—and that testing remains vital whatever the source. By paying close attention to where adulterated substances were purchased, local drug checking services can help participants make more informed decisions to protect their health. Europol, which is based in The Hague, built its intelligence on evidence from Germany, which seized the marketplace’s “criminal infrastructure” in December 2021, the agency said.
