Nearly 300 people accused of selling drugs on the dark web have been arrested across three continents over the past year, including the U.S., authorities in Europe and the U.S. said Tuesday. “Thousands of vendors advertised goods and services for sale on Empire Market, including controlled substances, compromised and stolen account credentials, stolen and counterfeit credit card information, and counterfeit currency, among others,” according to the pair’s indictment PDF. The two alleged administrators of Empire Market, a dark-web bazaar that peddled drugs, malware, digital fraud, and other illegal stuff, have been detained on charges related to owning and operating the illicit souk.
Perspective: Why Politics In The Workplace Is A Cybersecurity Risk
He also posted an analysis from Cloudflare showing that his DDoS solutions passed a stress test from China-based IPs. Rui-Siang Lin is a 23-year-old developer who describes himself on LinkedIn as a “crypto enthusiast and developer” from Taiwan. He claims to be an employee of Taiwan’s Ministry of Foreign Affairs, working as a “diplomatic specialist” in the technical section of the Taiwanese embassy in St Lucia. Previous jobs include a three-year internship at Cathay Financial Holding as a “Backend and Blockchain R&D” since November 2019. The former Incognito Market administrator claims to have graduated from National Taiwan University in June 2023. On May 18, the latest post on LinkedIn was related to the celebration of obtaining the Chainalysis Reactor Certification (CRC).
Local, state, and other federal agencies also contributed to Operation SpecTor investigations through task force participation and regional partnerships. HSI New York leads and directs all operational and administrative activities of the El Dorado Task Force (EDTF). The EDTF is the premier money laundering task force in the nation and comprises more than 200 law enforcement personnel representing approximately 35 federal, state and local law enforcement and regulatory agencies. The EDTF encompasses a standalone Cyber Division as part of an effort to stay abreast of emerging criminal threats and in keeping with current and future investigative priorities. The EDTF’s mission is to disrupt, dismantle or render ineffective organizations involved in the laundering of proceeds of narcotics trafficking and other financial crimes.
By preserving and cross-referencing seized data — such as user account details, blockchain forensics, and communications — law enforcement can map wider networks and plan future stings with precision. Unlike previous isolated arrests, this operation unfolded with a high degree of synchronization — not just across borders, but also between tactical, cyber, and legal departments. Germany’s central role suggests that European nations are taking a more proactive stance in leading international darknet crackdowns, particularly those involving high-value digital assets. On March 20, 2024, U.S. law enforcement, in cooperation with German and Lithuanian authorities, seized Nemesis Market and blocked the flow of these drugs into the United States and elsewhere. Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced sanctions against Parsarad for his role as the administrator of Nemesis Market.
Security Community
“We collated the information and then we sent out what we call intelligence packages to all the concerned countries. Basically it’s information or documents where we say, look, we know this person in your country has done this, you may want to open an investigation.” Georges says also that there are more arrests to come. As DOJ noted, the conspiracy involved laundering darknet proceeds through exchanges and peer-to-peer brokers. TRM has identified structured withdrawals from the market to personal wallets and then to services with less stringent KYC. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I’m currently based in San Francisco, but previously spent over five years in China, covering the country’s technology sector.
US Treasury Sanctions Iranian National For Operating Darknet Market Nemesis
- Today’s action, taken pursuant to Executive Order (E.O.) 14059, which targets proliferators of narcotics and their means of production, underscores the United States’ commitment to combatting all means of supplying narcotics to the United States.
- Opponents of strict dark web policing sometimes argue that such operations drive criminal activity to even more hidden or encrypted platforms, making detection harder.
- Just as Incognito built on the playbook of its predecessors, future markets will learn from RapTor.
- Law enforcement also conducted more seizures than any prior operation, including 117 firearms, 850 kilograms of drugs that include 64 kilograms of fentanyl or fentanyl-laced narcotics, and $53.4 million in cash and virtual currencies.
For some security experts, this could be considered surprising, insofar as Parsarad would likely have needed help to operate a marketplace the size of Nemesis. Parsarad faces a mandatory minimum penalty of 10 years in prison and a maximum life sentence, with DoJ Trial Attorney Gaelin Bernstein and Assistant U.S. Attorney Segev Phillips for the Northern District of Ohio prosecuting the case. In March of this year, U.S. officials placed sanctions on Parsarad, who reportedly collected a percentage of every sale transacted on Nemesis’s platform. 55,000 of these orders—or 13.75% of the total—were for stimulants such as methamphetamine and cocaine, while 17,000 (4.25%) were for opioids such as heroin and fentanyl. Nemesis allegedly processed over 400,000 orders between its launch and March 2024, when U.S., German and Lithuanian authorities seized its servers and shut it down. The FBI Cleveland Field Office is investigating the case with assistance from the DEA and IRS-CI in Chicago.
Adding another layer of pressure, the Office of Foreign Assets Control (OFAC) also slapped sanctions on Iranian national Behrouz Parsarad, identified as the operator of the Nemesis marketplace. Russia’s Prosecutor General’s Office has designated The Moscow Times as an “undesirable” organization, criminalizing our work and putting our staff at risk of prosecution. The Moscow Regional Court found Moiseyev and the 15 accomplices guilty of running or being part of an organized criminal group, as well as drug manufacturing and trafficking. Hydra was estimated to have been worth over $1.3 billion when German authorities shut it down, took control of its servers and seized its bitcoin assets in April 2022. Assistant U.S. Attorneys Ryan B. Finkel and Nicholas Chiuchiolo are in charge of the prosecution. A seizure notice has replaced the former marketplace, and a message directed at the underground economy has published.
The views expressed in the contents above are those of our users and do not necessarily reflect the views of MailOnline. But experts warned that hacker gangs are often slippery, and similar markets often soon re-emerge. According to the FBI, Genesis Market offered access to data stolen from more than 1.5 million compromised computers around the world, containing over 80 million account access credentials. The market’s takedown came after years of effort from Germany, Netherlands, Romania, Spain, Sweden and the United States.
Seized Domains And Official Notice
In addition, in November 2023, an undercover law enforcement officer received several tablets purporting to be oxycodone purchased on the Incognito Market. Tests on these tablets revealed that they were not authentic oxycodone at all but were, in fact, fentanyl pills. On March 20, 2024, U.S., German, and Lithuanian law enforcement agencies seized Nemesis’ servers in a joint operation. Since the takedown of Nemesis, Parsarad has discussed setting up a new darknet marketplace to take the place of Nemesis with vendors that were once active on the marketplace. Today’s action, taken pursuant to Executive Order (E.O.) 14059, which targets proliferators of narcotics and their means of production, underscores the United States’ commitment to combatting all means of supplying narcotics to the United States. Treasury remains focused on the risks posed by darknet marketplaces, as highlighted in previous designations of Genesis Market on April 5, 2023, and of Hydra Market on April 5, 2022.
Administrator Arrested
The dark web is a collection of sites that are not indexed by search engines and can only be viewed with specialized web browsers designed to provide privacy and anonymity. Many sites specialize in selling illegal goods that are not readily available on the public internet. Just weeks before Archetyp’s takedown, Europol coordinated Operation Endgame, a large scale effort targeting ransomware affiliates and infrastructure, leading to multiple arrests and the dismantling of servers used by major threat groups. Incognito Market was designed to foster seamless narcotics transactions across the internet and across the world and incorporated many features of legitimate e-commerce sites, such as branding, advertising and customer service.
Veracode’s Chris Wysopal On The Security Issues With AI Code Development
Europol dismantles major Dark Web drug hub Archetyp in a coordinated international operation that led to multiple arrests. After logging in with a unique username and password, users were able to search thousands of listings for narcotics of their choice. Incognito Market sold illegal narcotics and misbranded prescription medication, including, heroin, cocaine, LSD, MDMA, oxycodone, methamphetamines, ketamine and alprazolam. Increasingly, the FBI is working to disrupt major criminal online operations such as Monopoly Marketplace or Hive instead of waiting to make arrests simultaneously, according to officials who spoke last week at the RSA Conference. During an investigation and subsequent arrests, federal law enforcement is said to have seized cryptocurrency valued at $75 million along with cash and precious metals.
In stepped Empire Market which appeared in February 2018 (about 6-7 months after the demise of AlphaBay/Hansa) and soon became the leader of the Western darknet market ecosystem. The fact that its graphical user interface was built to resemble that of AlphaBay was purposely done to instill a sense of familiarity for users who had become accustomed to AlphaBay. In furtherance of Operation RapTOR and in their first action as a JCODE member agency, the Office of Foreign Assets Control (OFAC) additionally sanctioned Behrouz Parsarad, an Iranian national, for his role as the founder and operator of Nemesis Market following seizure of the market.
Dutch police think the administrators personally made around €5 million from the operation before pulling the exit scam. The Archetyp Market homepage now displays an official seizure banner, a common police tactic to publicly mark the dismantling of illegal platforms and raise awareness. The agency, based in The Hague, built intelligence based on evidence from Germany, which it said seized the marketplace’s “criminal infrastructure” in December 2021. The seized drugs include 64 kilograms (141 pounds) of fentanyl or fentanyl-laced narcotics; over 258 kilograms (569 pounds) of amphetamines; 43 kilograms (95 pounds) of cocaine; 43 kilogram (95 pounds) of MDMA; and over 10 kilograms (22 pounds) of LSD and ecstasy pills, authorities said.
Why CISOs Should Bet On Startups In Today’s Cybersecurity Market
A nine-count indictment was unsealed in the Western District of Tennessee charging six alleged members of a criminal street gang known as Unknown Vice Lords (UVL) – Ghost Mob with… Matthew Podolsky, the Acting United States Attorney for the Southern District of New York, announced today that GREI MENDEZ was sentenced to 45 years in prison for trafficking fentanyl out… Authorities emphasized that cooperation across borders, combined with targeted technical expertise, played a critical role in the platform’s closure. As Monaco noted Tuesday, the dark web drug racket was already a billion-dollar industry before the pandemic drove it to new heights.
Local, state, and other federal agencies also contributed to investigations through task force participation and regional partnerships. The takedown marks the end of one of the most established criminal marketplaces of its kind. In addition to drugs like cocaine, MDMA and amphetamines, Archetyp Market was known for facilitating the anonymous trade of high-risk substances, placing it alongside notorious former darknet platforms such as Silk Road and Dream Market. (The name is a pun on Tor, the anonymity browser that enables dark web access.) Last year’s Operation DisrupTor netted a similar number of arrests and double the drug seizures. In this capacity, Parsarad established Nemesis and held full control over the marketplace and its virtual currency wallets.
Although Archetyp Market’s main activity was drug trafficking, the Dark Web harbors a broader spectrum of dangers. Threat actors generally rely on it for its anonymous nature, which often enables them to run illicit schemes. The darknet market also had most of its server infrastructure in the country, which is now under the police’s control. The man was arrested at the Schiphol airport in Amsterdam on June 27, 2024, and electronic devices containing incriminating data and access keys to Bitcoin wallets were seized. For a local machine configuration, he recommends a computer purchased for cash running Linux, using a local Tor transparent proxy.
