Glende pled guilty to access device fraud and aggravated identity theft and was sentenced to four years and two months’ imprisonment on November 30, 2016. When AlphaBay first reappeared, Gray and other dark web analysts and users expressed suspicion that DeSnake might be compromised by law enforcement. In July of 2017, a global law enforcement sting known as Operation Bayonet took down AlphaBay’s sprawling narcotics-and-cybercrime bazaar, seizing the site’s central server in Lithuania and arresting its creator, Alexandre Cazes, outside his home in Bangkok. Yet in August of last year, AlphaBay’s number-two administrator and security specialist, publicly known only as DeSnake, suddenly reappeared, announcing AlphaBay’s resurrection in a new and improved form. Now, 10 months later, thanks in part to a tumult of takedowns and the mysterious disappearances of competing dark web markets, DeSnake’s reincarnated AlphaBay is now well on its way to its former heights atop the digital underworld.
Security firm Flashpoint says it has seen evidence and descriptions of DeSnake operating under the same pseudonym—first as a credit-card-focused cybercriminal on sites like Evolution and Tor Carder Forum before becoming a market administrator himself—since at least 2013. AlphaBay has long been rumored to have some sort of connections to Russia or Russians. Its rules have always banned the sale of data stolen from victims in former USSR countries, a common prohibition among Russian hackers intended to shield them from Russian law enforcement scrutiny. And when Alexandre Cazes wrote under the Alpha02 moniker on the site, he sometimes signed off with a Russian phrase for “stay safe.” But when Cazes was later tracked down in Thailand, many assumed AlphaBay’s Russian fingerprints had been designed to mislead investigators.
What Is A Dark Web Alert? A Guide For Businesses
Brandefense’s Dark Web Monitoring is a comprehensive solution designed to continuously track and analyze activity across hidden layers of the internet, including the dark web, deep web, and hacker forums. This solution focuses on identifying stolen data, brand misuse, and potential threats before they can cause significant harm. With Brandefense, businesses gain early visibility into risks that may otherwise remain undetected until it’s too late. Some are looking for illegal stuff they can’t buy elsewhere, like drugs or counterfeit documents. According to a newly filed superseding indictment, Thomas Pavey and Raheim Hamilton, owned and operated Empire Market from 2018 to 2020, during which time they facilitated approximately four million transactions between vendors and buyers valued at more than $430 million. The indictment charges Pavey and Hamilton with conspiring to engage in drug trafficking, computer fraud, access device fraud, counterfeiting, and money laundering.
Torzon Market
The decentralization plan, for instance, would require collective buy-in from a large number of developers and network operators for what would likely be seen as an essentially illegal project. Gray points out that DeSnake hasn’t published any code for either that system or AlphaGuard, and questions why he would relaunch AlphaBay four years after its takedown without any real progress toward his decentralization dream. “He hasn’t really demonstrated anything besides launching a marketplace,” Gray says. “I’m distrustful of DeSnake, and I think across the communities there’s a general distrust.” If that AlphaGuard feature doesn’t sound aspirational enough, DeSnake says he’s also in the early stages of a long-term plan to implement a fully decentralized marketplace system, essentially a BitTorrent to the current dark web markets’ Napster. In that hyper-ambitious plan, open source programmers and server operators who independently run hundreds or thousands of servers would be paid a portion of profits for hosting markets that would form a vast dark web network with no single point of failure.
‘DisrupTor’ Dark-web Crackdown Leads To 179 Arrests By International Law Enforcement
Some Dread members are attempting to sell their goods on Dread directly, although the site has a policy against such transactions. However, the new policy doesn’t forbid members from promoting their businesses on the site. The advertisement below, for UK fullz, prompts members to buy from him on the Wall Street Market, a smaller dark net market which is still operational after the seizures.
New AlphaBay, New Rules, New Operations
During this period deposits to darknet markets dropped significantly and no new leader emerged as vendors and buyers tended to avoid darknet markers while the dust settled. Stolen credit card data, personal information, stolen and fraudulent identification documents were frequently traded on the platform. Hackers used this stolen data for unauthorized transactions, which affected businesses and individuals alike. As AlphaBay grew, it attracted significant attention from law enforcement authorities worldwide.
Best Products
On Dread, the reactions to the recent law enforcement activity were a mix of dismay and defiance. “Are there any trustworthy markets left?” one user wrote, complaining that they used the dark web markets as a source for anti-seizure drug Lyrica and now had no good source. “This is so fucked up man, we have the right to do whatever we want to our bodies.” Based on our observations from analysis on dark web data using Lunar, we’ve identified the top 7 marketplaces on the dark web in 2025. We developed Lunar to monitor the deep and dark web, including dark web marketplace sites. Whatever may have happened with AlphaBay, business continued to as usual for its users, who swiftly flocked to other marketplaces.
Bohemia is an online marketplace accessible only through the anonymous Tor network. This market offers a variety of goods and services, including drugs, weapons, counterfeit documents, and other illegal goods. In a surprising twist, AlphaBay was revived in 2021 under the administration of “DeSnake”, one of the platform’s former co-founders. The new version of AlphaBay was redesigned with improved security features, including support for Monero (a privacy-focused cryptocurrency) and the I2P network, which offered additional layers of anonymity. This revival garnered significant attention within the darknet community, as AlphaBay’s return marked a comeback of a marketplace that had once been synonymous with illegal online trade.
The Biggest Dark Web Takedown Yet Sends Black Markets Reeling
Going forward, DeSnake said, the professional drug inspector program is an important part of a broader vision of a decentralized marketplace network, and drug safety is a topic as important as solutions for dealing with DDoS attacks or cybersecurity. “ODN” has reported on the development of the new AlphaBay since its reopening, and has visited the marketplace several times. DeSnake, the dark web market’s administrator, recently celebrated the first anniversary of its redevelopment with a post on the dark web forum Dread. DeSnake sent me a series of links to Tor-protected websites that he described as “DarkLeaks.” Someone, it seems, had hacked the Italian police agency responsible for investigating a pair of dark-web drug sites, known as Deep Sea and Berlusconi Market.
Top Dark Web Marketplaces Of 2025: A Deeper Dive Into Illicit Trade Markets
Reach out to NordStellar to start mitigating dark web risks and protecting your organization. A federal grand jury returned a one-count indictment today against Jose Tobias Jimenez-Martinez, 35, a Mexican national residing in Madera, charging him with trafficking large amounts of methamphetamine and fentanyl. It is estimated that the market transacted at least $1 billion worth of cryptocurrency (mostly Bitcoin) since its creation.
- The convergence of new, third-generation markets upon the dark web represents a paradigm shift in how goods are bought and sold on the dark web.
- “To be honest, it was exciting, mostly,” said the team lead, Petra Haandrikman.
- Even so, DeSnake claimed that he had traveled multiple times through countries with US extradition treaties and had never been caught.
- As a result AlphaBay became one of the most popular, comprehensive, and largest cybercrime marketplaces in terms of active users, vendors, and listings.
- Alpha02/Admin was eventually identified as Alexandre Cazes, a Canadian citizen who was found dead in his cell shortly after his arrest in Thailand in 2017.
AlphaBay has been offline since early July, fuelling suspicions among users that a law enforcement crackdown had taken place. A Canadian market established in 2021, WTN offers over 9,000 products, including narcotics, fake goods, and digital services. It operates in both French and English and has built a reputation for ease-of-use. This article reveals the top 10 dark web markets dominating in 2025, their unique characteristics, and the critical implications for enterprise cybersecurity. Shortly after the breach, these records appeared on dark web forums, where they were sold to malicious actors aiming to exploit customers through targeted scams and phishing attacks.
It’s an ever-evolving ecosystem—constantly shifting, reinventing itself, and adapting. Empire Market currently has less than 1,500 members as opposed to AlphaBay’s once 400,000. Although most legitimate vendors are still trading within trusted groups, it’s not uncommon now to see a buyer post his or her Wickr or Jabber alias to discuss a transaction privately. However, less-experienced criminals are more likely to take a “leap of faith” opportunity cost in order to start making money. These fraudsters are therefore more likely to post a public advertisement on a forum such as Dread or on a newer market such as Empire. Regardless, criminals of all experience levels are wary now after the Interpol bust of all the major markets of yesteryear, and that definitely shows given the amount of members on Empire’s only 1,500.
- In August 2020 Empire suddenly exit-scammed with the darknet markets disappearance.
- Watch our cyber team share their key insights from their investigations into the biggest dark web trends in 2022.
- It operates in both French and English and has built a reputation for ease-of-use.
- Further information on the operation against the Hansa Market can be obtained from Dutch authorities.
- It is considered very secure thanks to strict user validations and transparent payment and vendor review procedures.
Kinger’s ominous threat suggested they knew his real life identity and his citizenship was actually Dutch. They worked closely with a “security administrator” and second in command known as DeSnake, or simply “DS” for short. According to our historical darknet records, DeSnake had connections in Russia although his true identity and location was not publicly known. In cooperation with the FBI, the Royal Thai Police took steps to organize the extradition of the 24-year old Canadian administrator back to the United States. However, after Cazes was held for exactly a week at the Narcotics Suppression Bureau in Bangkok, reports of his apparent suicide surfaced.
The person who apparently boasted that AlphaBay is back, who goes by the alias DeSnake, has street credibility among crooks. DeSnake was one of the original moderators of AlphaBay along with Cazes, who committed suicide while imprisoned in Thailand. Maria Gershuni, a Flashpoint analyst, said that cybercriminals are increasingly aware that they need to steer clear of taboo subjects like ransomware and fentanyl. “The takedown of AlphaBay is significant, but it’s a bit of a whack-a-mole,” said Frank Cilluffo, director of the Centre for Cyber and Homeland Security at George Washington University.
While some of these markets were shuttered by law enforcement agencies – some took the easy way out with exit scams. Here are some of the now-defunct dark web markets that were notorious for cybercrime. Launched in 2023, STYX focuses on financial crime, providing stolen credit card data, hacked bank accounts and access to various cryptocurrency laundering tools. It might be time to update the obituary of one of the web’s most notorious marketplaces for hacking tools and drugs. Last week, two men, both in custody, were charged in federal court in Chicago with operating “Empire Market,” a dark web marketplace that enabled users to buy and sell more than $430 million in illegal goods and services around the world.
How To Protect Your Identity While Browsing The Dark Web
The platform’s rise and fall serve as a cautionary tale about the risks of operating on the darknet. From its explosive growth in 2014 to its dramatic takedown in 2017, and its brief return in 2021, AlphaBay’s journey is marked by events that left a big mark on the darknet scene. If a seller didn’t fulfill orders or was caught violating these rules, they could be banned from the platform. AlphaBay was run by admins going by the usernames Alpha02/Admin and DeSnake, along with a team of moderators and a public relations manager. Alpha02/Admin was eventually identified as Alexandre Cazes, a Canadian citizen who was found dead in his cell shortly after his arrest in Thailand in 2017. AlphaBay now uses only Monero cryptocurrency and currently has only two featured listings, both for drugs.
