Never log in with your real name or reuse passwords from other accounts. Stick to cryptocurrency, avoid downloading anything, and don’t share any personal info. It’s been a constant back-and-forth between cybercriminals and law enforcement, with each new site trying to be smarter and more secure than the last. Ransomware and cryptocurrency-based crimes saw a significant increase in 2023, with a nearly $176 million rise compared to 2022. For instance, cybercriminals can buy credit card details with a $5,000 balance for just $110. As of 2020, nearly 57% of the dark web was estimated to contain illegal content, including violence and extremist platforms.
- But in fact it was a guerrilla marketing stunt promoting OMG, a darknet marketplace selling heroin, mephedrone, marijuana, and everything else in between.
- Moreover, the layers of encryption and the bounce of your data from node to node effectively mask your IP address, enabling online anonymity.
- But despite the doxxing efforts, authorities have been unable to find who is behind the platforms.
- While tactics like these may have helped boost revenue for both markets, again, they have yet to match Hydra’s sizable financial success.
- The site was written in Russian, with sellers located in Russia, Ukraine, Belarus, Kazakhstan and surrounding countries.
- Chainalysis observed a growing trend of outsourcing operations among darknet vendors to third-party logistics and tech providers such as iKlad.biz and Klad.cc.
There are a number of Russian-specific forums and bulletin boards across the Darknet. Hydra is listed as a Wayaway Partner on the forum’s footer along with Hydra logos, market links, and various digital advertising scattered across the forum. In our previous Russian darknet focused blog post, we discussed some of the tools and techniques the Russians were discussing and using in offensive cyber operations against US and international organizations.
Darknet Markets
Throughout the history of the darknet market ecosystem, at different turns one marketplace has typically played the dominant role. The last several years’ examples include Silk Road, AlphaBay, Wall Street Market, and Hydra, most recently. Historically, as law enforcement closed each dominant marketplace, a new leader emerged. We can see this pattern on the chart below, which shows the level of market share controlled by the dominant market of each epoch.
Gangsters At War: Russia’s Use Of Organized Crime As An Instrument Of Statecraft
The cybercriminals trade even sensitive documents, such as medical records, passport information, and driver’s licenses. As we mentioned earlier, not everything sold on dark web markets is illegal. As terrible as its reputation may be, some vendors sell legitimate goods or services. Some customers even use the dark web to make anonymous purchases, especially in areas where privacy is a huge concern.
How Complex Are Dark Web Marketplaces Currently?
This was likely due, at least in part, to the blocking of social media sites in Russia and the restrictions on VPNs in the country. While the average listing price was little more than $22, average prices for individual brands ranged from $3 to $100. Our report does not suggest in any shape or form that the companies included or referenced have suffered security breaches. Furthermore, we have not purchased any of the credentials being sold on the Darknet. As well as analyzing the data by category of account and by brand, we also conducted a Russia-specific analysis in order to get a better understanding of the current landscape following the invasion of Ukraine in 2022. We also continued to gather average listing price data for each brand and have included that data in our report.
Darknet Market Revenues Rise In 2023 As Markets Develop Role Specialization
Most people start by using the Tor Browser, which hides your IP address. Telegram channels supplement traditional onion sites, blurring lines between the dark web sites and more mainstream communication tools. The effectiveness of Russian Market lies not just in its marketplace functionality but in the sophisticated infection techniques employed by the infostealers it hosts.
Russian Darknet Markets
It works kind of like a VPN, but instead of routing your traffic through one remote server, it routes it through many random servers across the globe. Since 2020, 2easy has sold massive stealer logs with sensitive data like passwords, bank cards, and initial access credentials. It supports operations in multiple languages and operates on both clearnet and Tor. While this topic may seem distant for most people, understanding how these spaces operate is crucial. It helps us stay more vigilant, better protect ourselves, and make informed decisions online. By leveraging automated dark web monitoring, organizations can mitigate risks, and take preventive measures before the leaked data is exploited.
The 9 Most Private Cryptocurrencies In 2025
These platforms allow vendors to reach customers who are less technologically savvy, whilst also mitigating against market turbulence caused by darknet market exit scams or law enforcement takedowns. In this respect, the use of encrypted communication apps like Telegram and Signal have reduced the barriers to access for drug buyers to purchase products online, whilst also reducing fees that vendors pay to darknet markets for sales. This migration is further bolstered by the fact that the majority of new Western DNMs launched in 2024 have been characterized by poor design features or security issues. The following table shows the 20 online shopping brands whose hacked account credentials were most frequently listed for sale on the darknet markets. Number of listings refers to the total number of accounts for sale, regardless of whether they are listed separately or together. The market facilitates trades in stolen credit card data, hacked bank accounts, and services to facilitate the laundering of cryptocurrency.
The quantity, price, and characteristics of the product are all provided. However, the platform lacks an advanced search option and a wallet-free payment option. The marketplace has several rules that every user is bound to follow. If any user is found not complying with the law, strict and immediate action will be taken against them. It uses PGP encryption to protect sensitive data and messages, and accepts payments via Monera and Bitcoins to keep you anonymous on this marketplace. It’s a user-only marketplace, meaning you need to register to enter.
But these efforts of law enforcement don’t go in vain; hackers and criminals lose trust if a website or marketplace goes down. According to a recent trend, the dark marketplaces faced a decline in revenue. Chainanalysis, a blockchain analysis firm, conducted research that shows that the revenue decreased from $3.1 billion (2021) to $2 billion (2024). Like ransomware, criminals can buy software and inject your devices with viruses.
History Of Dark Web Marketplaces
- Looking closer at ASAP Market inflows, it won some share of revenue across all drug purchase types, receiving 37.1% of social supply, 35.7% of large retail, 16.5% of small retail, and 13.5% of wholesale purchases.
- Find out more about how different types of hacked credentials can be used for fraud in the common scams section of our Darknet Market Prices research hub.
- ExpressVPN and Windscribe were the next most frequently listed VPN services on Kraken.
- Chainalysis data shows darknet marketplace revenue dropped post-Hydra seizure in 2022 but recovered to $2 billion in Bitcoin inflows during 2024 Darknet market BTC inflow drop and shift to Monero.
- Hydra was estimated to have been worth over $1.3 billion when German authorities shut it down, took control of its servers and seized its bitcoin assets in April 2022.
Suppliers are meeting demand by producing Udemy-like online courses that teach the surprisingly accessible manufacture of synthetic drugs. However, BBC research earlier this year revealed the most common way for darknet sites to close is via so-called ‘exit scams’ where the administrators voluntarily shut down the sites but steal their customer’s funds in the process. Just because the seller has good reviews does not mean you can trust them. There’s nothing stopping sellers from packing up and leaving the market at any time. They could get a batch of bad products, get arrested before they can ship your order, or any other number of things.
Laws are strict — potentially sending offenders to jail for five to ten years. And these days, the fastest way out of Russian prison is heading straight to the front with Ukraine (where the report details soldiers can now have drugs delivered). With a soft clunk, the magnet attaches the bag of Russia’s favorite drugs, mephedrone (4-MMC) and alpha-pvp (flakka), underneath the mailbox.
Since the summer of 2022, the aforementioned markets have waged war against each other, involving the spreading of rumors, the doxing of administrators and staff members, distributed denial of service attacks and breaches. The expanding use of cryptocurrencies by terrorist organizations and state-sponsored actors illustrates the dual-edged nature of technological innovations — providing both opportunity and risk. Ransomware actors and fraudsters are leveraging technological advancements, including cross-chain bridges and artificial intelligence, to bypass detection and scale their operations. Cryptocurrency-enabled online sales of illicit drugs saw a year-on-year growth of over 19% between 2023 and 2024, nearing USD 2.4 billion. However, you can trace its roots to the development of technologies like the Tor network or Freenet. In March 2000, an Irish grad student named Ian Clarke created the software application, Freenet.
These platforms sell everything from drugs and fake IDs to weapons and hacking tools, resembling a digital black-market bazaar. To prevent the users from DDoS attacks, it provides personal marketplace domains to high-volume buyers and sellers. Moreover, this shop provides detailed statistics about each user profile on the platform, giving users a better idea about the vendors for the buyers and vice versa. This marketplace accepts payments via Monero but also supports the Escrow system. Dark web search engines support dark web marketplaces and allow users to use them, but still accessing them is full of risks; they can infect your device with malware or viruses, and can bring other legal consequences.
Exodus Marketplace started to become popular after the shutdown of Genesis Market, and it replaced it successfully. It claims to control more than 7,000 bots from 190+ countries, with data prices ranging from $3 to $10, based on the quality it offers. The marketplace has a simple interface, lets users filter logs easily, and accepts Bitcoin, Monero, and Litecoin for payments. The marketplace supports multiple payment methods, including Bitcoin (BTC), Litecoin (LTC), and Cryptocheck. They add new batches of stolen data every other week, and there’s even a bidding system where buyers can place offers on new data batches as soon as they become available. You can even find things such as BIN checkers and PayPal cookie converters.
