Central to this effort is the use of advanced blockchain intelligence tools, which provide critical insights for tracing illicit transactions, identifying threat actors, and supporting enforcement actions. The progress made in disrupting illicit networks demonstrates the impact of collective action, but sustained vigilance and adaptability — empowered by cutting-edge blockchain analytics — will be essential to securing the crypto ecosystem in the years ahead. Nevertheless, the Western DNM ecosystem experienced some innovation in spite of recent enforcement actions. Amongst the most notable was the first merger and acquisition between two marketplaces on the darknet — whereby the struggling SuperMarket was absorbed by the now-Superlisted DrugHub in an operation that lasted around one month.
- Unlike Bitcoin, which records every payment on a public ledger, Monero conceals all transaction details by default which makes them nearly impossible to trace.
- Security researchers have been monitoring forums within the cybercriminal underworld to investigate the leading markets operating in 2024.
- Researchers should carefully consider the potential implications of their research and take steps to minimize any potential harm or negative consequences.
- The Senate subcommittee did not look closely at darknet sites, the investigator told me, because they found so much on the open web.
- Alongside that, there are many self-identified dependent and addicted PWUD who find the predictability, professionalism and stability of supply a significant benefit 24.
Operations
“Except for those three times, I never got shorted, and the product ranged from good to excellent quality,” she noted. Classic darknet markets sell diverse illegal goods; data stores focus on leaked or stolen data like credentials, databases, and ID records. Last week, one of the dark web’s most prominent drug marketplaces – Archetyp – was shut down in an international, multi-agency law enforcement operation following years of investigations. Why are these markets still seen as enticing places to sell drugs, despite the risks?
- This opaqueness makes the flash of blood impossible to see, so you never quite know whether you’ve hit a vein.
- Compared to its predecessors, Archetyp enforced enhanced security expectations from its users.
- They developed a new dataset called “Darknet Usage Text Addresses” (DUTA) for studying Darknet active domains and the anonymous expression and illegal activity that occurs on the Deep Web.
- WeTheNorth is a Canadian market established in 2021 that also serves international users.
- Despite the fact Archetyp had clearly raised the bar on security on the dark web, Operation Deep Sentinel – a collaborative effort between law enforcement agencies in six countries supported by Europol and Eurojust – took down the market.
Subsequently, we conducted a comprehensive, large-scale, longitudinal study to demystify opioid trading activities in anonymous markets and forums. In our study, a total of 248,359 listings from 10 anonymous online marketplaces and 1,138,961 traces (ie, threads of posts) from 6 underground forums were collected. Among them, we identified 28,106 opioid product listings and 13,508 opioid-related promotional and review forum traces from 5147 unique opioid suppliers’ IDs and 2778 unique opioid buyers’ IDs. A total of 248,359 listings from 10 anonymous online marketplaces and 1,138,961 traces (ie, threads of posts) from 6 underground forums were collected. Our study identified 41,000 opioid trade–related marketplace listings and forum posts by analyzing more than 1 million listings and posts in multiple anonymous marketplaces and forums, which is the largest underground opioid trading data set ever reported.
Industry-Specific Cyber Threat Intelligence Powered By Agentic AI
The durability of these markets tells us that if policing responses keep following the same playbook, they will keep getting the same results. And by focusing so heavily on these hidden platforms, authorities are neglecting the growing digital harms in the spaces we all use. Some respondents said that being protected from physical risk on the dark web is not only a benefit for existing drug suppliers, but may also make the activity attractive to people who would not otherwise be willing to sell drugs. Regarding profits, darknet vendors do not have to limit their trading to face-to-face interactions, and can instead sell drugs to a potentially worldwide customer base. Trade is booming despite disruptions from law enforcement and particularly “exit scams”, in which market admins abruptly close down sites and take all available funds.
Data Availability
Our study determined the underground marketplace and forum list based on darknet site search engines and previous research works 20. More specifically, we used darknet site search engines (such as Recon, Darknet live, Dark Eye, dark.fail, and DNStats 21,22) to search underground marketplaces and forums and then manually validated their activeness. In our study, we only selected marketplaces with more than 30 opioid listings. In this way, we gathered 5 active underground marketplaces with opioid listings. Note that some high-profile underground marketplaces and forums are frequently deactivated or have been shut down by law enforcement authorities 23. Hence, we also gathered snapshots of 5 underground marketplaces and 6 forums collected by the anonymous marketplace archives programs and previous research projects 20.
We’ve Just Released An Research Report!
“Bravo,” says another for a $5 sample of fentanyl, one of 18 reviews posted on the product’s profile page in the last week. In all, Empire lists over 18,000 narcotic offerings, including hundreds for oxycodone alone. A Canadian market established in 2021, WTN offers over 9,000 products, including narcotics, fake goods, and digital services.
Silk Road 20
Highly cited articles in this cluster are shown in Table 6 and analyzed further. Some recent research on uncovering the characteristics of Darkweb sites reveals that law enforcement agencies are constantly challenged in identifying signals of potential threats for attacks or data breaches within the Darkweb. Addressing this issue, researchers 7 have successfully demonstrated the use of LDA (Latent Dirichlet Allocation) and a non-parametric HMM (Hidden Markov Model) to spot anomalous behaviors. Their techniques identified popular discussion topics in the Darkweb and diagnosed a state transition or change in topics bound to happen around any unique event. Going beyond the topics of interest, the need to identify perpetrators directly benefits law enforcement.
The use of cryptocurrencies in the Darkweb has been the subject of recent studies. These studies have examined the facilitative factors that enable Bitcoin-related crimes on the Darkweb, such as the anonymity of cryptocurrencies and the lack of regulation in certain jurisdictions 76. Other studies have explored the ethical implications of using cryptocurrencies for illegal purposes and the potential for regulation to address this issue 77.
Police Seizes Archetyp Market Drug Marketplace, Arrests Admin
In one case in France, law enforcement authorities collected more than 120 million text messages from 60,000 mobile phones. According to the indictment, Parsarad, 36, of Tehran, Iran, launched Nemesis Market in or around March 2021. Nemesis Market operated on the dark web, a network that uses The Onion Router (TOR) to encrypt traffic and hide users’ Internet Protocol (IP) address.
According to TRM Labs, cryptocurrency-enabled online drug sales grew by more than 19% from 2023 to 2024, reaching nearly USD 2.4 billion in total volume. At the same time, 2024 saw a 42% decline in the number of new darknet marketplaces launched year over year — a signal that while the market is consolidating, it is also becoming more sophisticated. The opioid buyer (client) will also access the anonymous online market and create an account in each anonymous marketplace before they can find the listings of opioids (step 4).
AI-Powered Cloud Security Platforms Set To Transform Enterprise Cyber Defense In 2025
Co-occurrence of the same opioid suppliers across different anonymous marketplaces. We compared our method with the state-of-the-art topic modeling method Machine Learning for Language Toolkit (MALLET) 30 and our model without transfer learning stage (baseline). Our experiment evaluated MALLET on our annotated anonymous marketplace and forum data set (Table 3) using 3 classification algorithms in the document classification tool (package cc.mallet.classify class in MALLET’s JavaDoc API Application Programming Interface). In particular, MALLET is retrained and evaluated via 10-fold cross-validation. We also applied the MALLET topic modeling toolkit (package cc.mallet.topics MALLET’s class in JavaDoc API) on the same data set to predict the type of topic.
This ability of dark web communities to thrive in disruptions reflects how dark web market users have become experts at adapting to risks, managing disruptions and rebuilding quickly. These included an advanced encryption program known as “Pretty Good Privacy” and a cryptocurrency called Monero. Unlike Bitcoin, which records every payment on a public ledger, Monero conceals all transaction details by default which makes them nearly impossible to trace.
DARKNET MARKETS ARE OVERCOMING THREATS POSED BY HACKERS
Firstly, the study provides a comprehensive bibliometrics analysis of a corpus of 1068 publications from 2012 to 2022, including the pandemic period, which played a crucial role in the Darkweb’s use by both legitimate and illegitimate users. Secondly, this study identifies thematic areas of research based on science mapping analysis. Thirdly, while previous studies have examined related topics such as cryptocurrencies and Darkweb 14, 15, 16, our study is the first to examine the direct mapping of Darkweb research to SDGs.
22 Cluster 2 (green): Cybercrime, Data Privacy, Cryptography
This is the first study to measure and characterize opioid trading in anonymous online marketplaces and forums. From our measurement, we concluded that anonymous online marketplaces and forums provided easy-access platforms for global opioid supply. The use of the Darknet has become increasingly popular after the study 19 provided an overview of the Influence of the Darkweb in different spheres of society by discussing the number of daily anonymous users of the Darkweb (using Tor) in Kosovo and worldwide. Results are gathered from Ahmia and Onion City Darkweb’s search engines, and anonymity is also discussed. The paper calculates the number of users based on IP addresses and country codes and presents the number of users in anonymous networks on the Darkweb.
