However in December last year a Ukrainian-born hacker broke into the Solaris market’s crypto-wallets and donated $25,000 to a charity for Ukrainian refugees. “Alex”, a drug dealer from Moscow who did not want to give his real name for fear of being identified by police, said since Russia’s invasion of Ukraine “MDMA, LSD, and ketamine are almost impossible to find. This method was seen as less risky for buyers and sellers fearful of the heavy prison sentences handed out in Russia for drug crimes. Teams of ‘droppers’ employed by the online shops are paid to secrete drug packages, rather than hand them over in person.
In this post, we’ll walk you through the top 10 dark web marketplaces that you need to watch for potential threats to your organization. Boutique dark markets are implementing stricter security measures, including better encryption and multi-layered protections, to safeguard transactions. Everything is well-organized and easy to find, which benefits newcomers to this environment.With a growing user base and an expanding inventory, Vortex is positioning itself as an “all-in-one” marketplace on the darknet. Although some of these markets prohibit certain extreme content such as violence or exploitation, most operate with very few rules beyond ensuring the security and anonymity of their users. Check out our article on the 10 best browsers for surfing the dark web and find out which one is the safest, fastest, and most reliable for maintaining your privacy.These markets have come a long way since the days of Silk Road and AlphaBay, which were the first major pioneers of anonymous commerce on the darknet. The founder of the notorious darknet market Hydra received from a Moscow judge a life sentence in one of the country's harshest penal colonies.
Since its creation in 2005, Exploit.in has become a fundamental component of the cybercriminal ecosystem, reaching a level of notoriety within the dark web forum landscape comparable to prominent sites like XSS.is. Additionally, XSS.is offers restricted and paid-access areas, enhancing its sense of exclusivity. The platform stands out for implementing advanced security measures, such as eliminating IP address logs and encrypting private communications, thereby protecting user anonymity. Thanks to its valuable content and a strict security system against fraud and spam, XSS.is is recognized as a reliable source for conducting online criminal activities. This space, known as the dark web, hosts a variety of forums that operate beyond the reach of conventional search engines and international laws.Among these, Russian-speaking forums stand out not only for their number but also for their impact on the global cyberspace. In 2023, Chainalysis discovered that some popular fraud shops rely on payment processors as a way to reduce their own costs, add efficiency to their operations, and perhaps add a layer of security to transactions.
Other Government Sites
Together, these nations were the source of $538 million to illicit markets during 2020 while people there received $403 million, Chainalysis said. Darknet marketplaces receive most of their money through peer-to-peer crypto marketplaces and centralized exchanges, Chainalysis wrote. Hydra also offered stolen databases, forged documents, and hacking-for-hire services. This Russian dark web platform was used by criminals to sell drugs and launder money, and it had a turnover of $1.35 billion in 2020, 19,000 registered seller accounts, and served at least 17 million customers worldwide. “People are recording videos of themselves using drugs, talking about their lives, hanging out, collaborating with other bloggers.” Drug users have been chatting about their drug use on dedicated drug user internet forums for decades, but now a younger generation of drug users are doing so on video. As Hydra did, many of these markets have continued the tradition of including drug harm reduction information for drug buyers, such as providing drug testing and medical advice.
In addition, German Federal Criminal Police seized cryptocurrency wallets containing $25 million in bitcoin from the marketplace, the DOJ said. No, black market websites operate illegally and pose high risks of scams, fraud, and law enforcement action. Launched in September 2022, Torzon Market operates on the Tor network and features over 11,600 illegal products, including drugs and hacking tools. WeTheNorth is a Canadian market established in 2021 that also serves international users. BidenCash’s rapid rise and focus on financial data make it a significant concern for cybersecurity professionals.

Launched on July 8, 2016, the forum is accessible via a Tor address, ensuring user anonymity. Since its founding in 2015, the RuTor forum, which operates in Russian and resides on the dark web, has firmly established itself within the cybercriminal landscape. Interestingly, RAMP managed to stay under the radar of authorities by focusing on a predominantly Russian audience and restricting the sale of certain hacking services.
What Is Russianmarket?
From stolen credit card information to malware, Russianmarket has established itself as a hub for cybercriminals seeking anonymity and profit. The Kremlin and the White House rarely see eye-to-eye, but for now, both uphold the status quo of the war on drugs. “You can order online anytime, chances are good you have many available drugs in your city, and you can pay for it using a credit card or QIWI a common ATM-like way to send cash. While selling drugs online is far from new — in fact, the very first thing bought and sold on the Internet was a bag of weed — no nation has so wholeheartedly embraced e-shopping for their preferred pick-me-ups as the Russians. This failure to cope lies partly with the changing nature of the drug market itself. Just like the United States, Russia has been waging a war on drugs.
History Of Dark Web Marketplaces
After the closure of Hydra, it actively attempted to advance in the market by hacking RuTor, the largest Russian darknet forum, and trying to lure stores away with additional discounts and bonuses. For example, after the closure of the AlphaBay marketplace, other marketplaces, namely Hansa and Dream Market, experienced an abnormal spike in activity. Moreover, 66% of migrating users choose to move their activity to the same coexisting marketplace. The “darknet” (or dark web) is a decentralized, unindexed, unregulated part of the World Wide Web that is only accessible using certain browsers, such as the so-called “Onion Router,” or “Tor” for short.

Crime Forums And Markets Specializing In Cybercrime Enablement
Cybersecurity experts should pay close attention to these trends, as they often indicate emerging threats and profit-generating tactics among the cybercriminal forums. It offers counterfeit documents, financial fraud tools, hacking and malware services. Active for a decade since 2014, it is a widely used credit card shop used to source stolen credit card information such as dumps, CVVs, Wholesale Accounts. It maintains a very strict level of user verification and integration with an official Telegram account to provide real-time updates to users. Some people go a step further by using a virtual machine or a dedicated device just for dark web browsing.
From stolen logins to full account takeovers, the fallout from infostealer logs can spread fast and wide. If you confirm that a user’s data was part of a stealer log listed on the Russian Market, treat the device as compromised. Encourage employees and users to use strong, unique passwords across all platforms. Because password reuse is so common, even a seemingly low-value log can grant access to sensitive accounts elsewhere.
OMG! OMG!

Within two weeks of the shut down a mirror of the website was fully functioning on the dark web. The law enforcement operation involved seventeen countries including the British, Australian, Canadian, Spanish, Italian, German, Swedish, Polish, Danish, and Romanian police forces. The Federal Bureau of Investigation shut down the website's surface web domains in April 2023 as part of the international law enforcement operation known as Operation Cookie Monster. Genesis Market was known for selling persistent access to victim's computers.
Tanker traffic from Russia via the Baltic Sea gives a good indication of shadow fleet activity (though some tankers departing Russian ports are not dark ships). The existence of the shadow fleet matters greatly, not just because the vessels are old but also because they don’t comply with the rules that govern maritime operations. In the months since Russia’s 2022 invasion of Ukraine, vessels have joined the shadow fleet at an extraordinary rate.
How Boutique Darknet Markets Are Making Drug Busts Harder

Within just a few hours on February 20, 2023, for example, two shadow fleet tankers got into difficulty in the Bay of Gibraltar and had to be aided by tugs and a salvage ship. Twelve months into the war, the fleet had grown to some 600 tankers and other types of vessels. But Russia has been successful in circumventing these sanctions, especially through its extensive use of so-called shadow vessels, which are old and lack proper insurance. They and other Western countries already promised to phase out Russian crude oil from their own markets. In addition to serving the transportation needs of Russia (as well as Iran, North Korea, and Venezuela), the shadow fleet forms quintessential “gray zone” aggression, causing tangible harm that targeted countries can do little to punish. Beyond Russia, the report warns that this drug trade model is now expanding across borders, posing public health and security risks.
- This failure to cope lies partly with the changing nature of the drug market itself.
- In the course of their investigation, law enforcement agencies in Russia and Belarus reportedly seized nearly a ton of illegal narcotics, including psychotropics.
- It doesn’t take a sophisticated hacker to buy access to someone’s email, bank account, or corporate login anymore.
- If the address is in one of the cybercrime datasets, the person will receive an email that includes personalized instructions on how to clean up their computer and make it safe again.
And over the last 9 months, using a mix of publicity stunts and crippling cyber attacks on each other, OMG, Kraken and around 10 other darknet markets have been engaged in a tit-for-tat turf war for Hydra’s throne. Yet, like the Hydra of Greek legend, whose heads multiply when they are severed, a new generation of darknet markets popped up to challenge for control of a market worth at least $1.37 billion, according to unofficial estimates. But this very public advertising blitz stemmed from events that took place In April 2022, when the world’s biggest ever darknet market Hydra, which made most of its money selling drugs, was shut down and its alleged mastermind Dmitry Pavlov was arrested in Moscow. Darknet marketplaces are commercial websites accessed by an encrypted browser which operate on the dark web, functioning primarily as black markets for illegal activity or substances. Advertised as “the most advanced darknet market ever,” OMG primarily provides illegal drugs, but also offers products like hacking utilities, banking information, and more. Like the vast majority of all darknet market users, former Hydra counterparties across all categories — both retail drug buyers and criminal users — transacted almost exclusively with OMG during the OMG dominance period.
Genesis offline
Others are looking for stolen data, hacking services, or even banned books and political content. To protect both parties, many marketplaces use an escrow system, so the money is only released to the seller once the buyer confirms that everything went smoothly. By supplying stolen data, these dark web links fuel many online scams and identity theft operations, playing a critical role in the darker aspects of the internet. These platforms sell everything from drugs and fake IDs to weapons and hacking tools, resembling a digital black-market bazaar. The first category includes classic marketplaces, which serve as one-stop shops for a wide range of illegal goods. It is one of the most active and up to date markets and always provides new and updated malware and data.
If the address is in one of the cybercrime datasets, the person will receive an email that includes personalized instructions on how to clean up their computer and make it safe again. In order to gain control of victims’ computers, the malware Genesis Market employed used a legacy Bitcoin address to determine the command-and-control (C2) server, from which cybercriminals initiated remote access to infected devices. To them and others, Genesis sold forms of stolen PII like credentials for email and social media accounts, as well bank accounts and crypto service accounts, and in its lifetime received tens of millions of dollars in crypto, mostly Bitcoin.
So What Is The Darknet, Exactly?
“Nobody is interested in taking the vessels into a port and arresting the crew, because then you’re stuck with the ship in your harbor. UNCLOS provides more significant rights to vessels traveling in countries’ exclusive economic zones (EEZs), which extend 200 nautical miles beyond the territorial waters. The United Nations Convention on the Law of the Sea (UNCLOS) grants vessels the right of innocent passage, which means the right to “freely navigate through territorial seas.”23Jennifer El-Fakir, “Retaliatory or Lawful? Although the International Oil Pollution Compensation Funds (IOPC Funds) provide financial compensation for oil tanker spills in its member states, it’s not yet clear whether it will compensate coastal states for spills by shadow tankers. Such monitoring provides insight into the vessels involved and the type of incidents caused, which can be used for forward planning.
What’s Sold On The Russian Marketplace
Ulbricht was eventually arrested by US law enforcement and Silk Road was seized and taken offline. Silk Road not only aggregated thousands of drug vendors, it created a user-friendly interface that resembled a clear-net shopping website. The boom in dark e-commerce is also partly to blame for a recent surge in global ransomware attacks, which were expected to inflict damages exceeding USD 20 bn in 2021, according to a 2017 report (pdf) by CyberSecurity Ventures — that’s 57 times the costs they inflicted in 2015. “The dark net does not intrinsically breed criminal activities,” a 2018 academic study published in Security Journal notes.