It was in this vacuum that Archetyp emerged, eventually becoming a key landing zone for vendors displaced by earlier market collapses. One of its defining features was its structured support for identity continuity. Archetyp encouraged vendors to re-establish their reputations through Pretty Good Privacy (PGP)-signed migration messages – cryptographically signed proofs that linked new accounts to profiles from previous marketplaces.
Torrez Market Darknet

Dark web marketplaces are mostly hubs for illicit goods and activities, posing serious risks to users and the wider community. Unlike surface web platforms, darknet markets have no reliable way to verify vendors. Many “trusted” sellers use fake reviews or steal reputations from shutdown markets.
- The main drug sold online is cannabis, followed by synthetic drugs, cocaine and, to a lesser extent, opioids.
- When it comes to cybercriminal enablement, markets like Kraken Market, the DNM Aggregator, and Exploit.in are go-to services, providing bad actors with tools to carry out ransomware attacks, hacks, and more.
- First things first, always use strong and different passwords for each account you open.
- And when it comes to paying, the site sticks to Bitcoin (BTC) and Monero (XMR) to keep transactions private.
Top Darknet Markets
- Looking at this picture, we can say that opiate supply is most common in the Northern Caucasus and Southern Siberia regions and Central Russia and less common in the “rich” regions.
- The second category consists of data stores, which specialize in stolen information.
- These anonymous marketplaces—operating mainly on the Tor network—are now a primary threat vector for businesses and cybersecurity professionals.
- While you could find all sorts of products on Silk Road, drug sales quickly became prevalent because of the profits it raked in.
- Vendors often build up reputations through ratings and reviews, just like sellers on mainstream platforms.
- Surprisingly, most guns on the darknet actually start as legal products.
Killnet has attracted a lot of attention because of past DDOS attacks against NATO, U.S. law enforcement, and multiple EU government agencies during the peak of war in Ukraine. It is not clear if this group may be state-supported or solely driven by their ideological motivation, or perhaps artificially created by foreign governments considering ongoing geopolitical tensions. It is worth mentioning, another actor with the alias Wazawaka was presumably responsible for a similar attack against the now closed Hydra marketplace back in 2018.
The less populated regions of Siberia are less affected by opiates in Russia. Figure 4 illustrates the distribution of opiates by region, setting the stage for the subsequent discussion on regional public health impacts. Regional distribution of all drugs for sale presented on Hydra, in grams per 100,000 population in Russia. The map in Figure 3 illustrates the daily supply volumes of total amounts of drugs, measured throughout the year and brought to average. The link shows more detailed visualizations and data on our GitHub 29.
How Much Is Stolen Data Sold For On Darknet Markets?

Disruption tended to demonstrate the resilience of the illicit drug market ecosystem 19. Law enforcement takedowns of cryptomarkets stimulated a process of reconfiguration in the market 20•. At one point, the cryptomarkets were served by a range of sites/forums such as the cross-site aggregator grams, the r/DarkNetMarkets Reddit forum and the DeepDotWeb site.

What Do People Sell Or Exchange On Darknet Markets?
One of the central76 discussion forums was Reddit’s /r/DarkNetMarkets/,777879 which has been the subject of legal investigation, as well as the Tor-based discussion forum, The Hub. Known for its publicity stunt releasing millions of stolen card details for free, BidenCash specializes in credit card fraud and identity theft. Torzon Market has established itself as a significant player in the darknet ecosystem, offering a secure, user-centric platform for anonymous trading. Its commitment to privacy, diverse product offerings, and robust security measures make it a preferred choice for users seeking discreet transactions within the darknet. Forums and magazines play a crucial role in keeping users informed about new market links and updates.
Dutch National Police Share Depth And Sophistication Of Genesis Market Identity Theft Operation

This migration is further bolstered by the fact that the majority of new Western DNMs launched in 2024 have been characterized by poor design features or security issues. This shift poses unique challenges for law enforcement, who must adapt traditional monitoring methods. The fragmentation of darknet markets means that law enforcement agencies can no longer focus their efforts on a few large, easily identifiable targets. Instead, they must gain access to multiple, hyper-secure markets and then regularly monitor this wide array of smaller, highly localized platforms.
Office Of The Chief Data Officer
(He declined to share detailed numbers, which he says are part of a still-unpublished study.) “What happened in 2017 was very unique, that one-two punch,” Christin says. “History has taught us that this ecosystem is very, very resilient,” Christin says. “It’s part of a cycle, and we’re in the chaotic part of the cycle. We’ll have to see how it recovers. But if I were a betting person I would put more money on it recovering than on it dramatically changing.” All products featured on WIRED are independently selected by our editors. However, we may receive compensation from retailers and/or from purchases of products through these links.
It was a period of COVID-19 restrictions, so we have data on the decreasing amounts of drugs distributed monthly in Russia during COVID-19 restrictions. A strong and significant correlation between the quantities of heroin for sale and lethal overdoses or fatal poisoning was established. We aimed to use the dark web data and officially published indicators to identify the most vulnerable regions of Russia and the correlations between the pairs of variables to measure how illicit drug trade can affect population well-being. The engine of the marketplace protects the total number of users registered on it, but based on the number of unique shops, likely it may exceed 15,000 unique actors. Other reputable sellers who joined Kraken include “Shiva” operating at least since 2014 in Dark Web.

Despite Telegram’s anonymity, the dark web is still a hot spot for illegal trading of malware, illicit goods, and stolen data (such as stolen credit card information). Even with the increase in law enforcement pressure, the dark web market still achieved a revenue of $2 billion in 2024. Therefore, as long as this dark part of the internet exists, these marketplaces will flourish and emerge. Cryptomarkets are a focus for the gentrification hypothesis which proposes that a combination of long-established social, economic and technical conditions is serving to reduce the importance of violence and predation in drug distribution 17, 43. Drug delivery has displaced street- or house-based exchanges in some circumstances; drug markets have become segmented by class and race; and the opportunities for combining drug dealing with other vice-exploitation crimes has declined 44. Cryptomarkets extend some of these developments, seeking to emphasise conflict resolution, cooperation and professionalism and punish predation 45, 46, making their ethos more attractive to buyers and dealers 47.
Like most of the markets, STYX supports Bitcoin (BTC), Monero (XMR), and other crypto tokens to keep everyone’s identity hidden on this marketplace. The marketplace supports multiple payment methods, including Bitcoin (BTC), Litecoin (LTC), and Cryptocheck. They add new batches of stolen data every other week, and there’s even a bidding system where buyers can place offers on new data batches as soon as they become available. Just as there are new entrants, the dark web has its veteran markets too, and Brian’s Club is one such market. It has been in operation for more than a decade since its debut in 2014.
Silk Road And Early Markets
These users have authored nearly 242,000 posts which are dispersed across 11,303 topics. This shop primarily deals in synthetic drugs like mephedrone, A-PVP, and ecstasy. Dark web chatter and innuendo suggests how both DNMs are rumored to be more pro-Ukrainian than Russian. With nearly 292,000 members, RuTor is the largest DNM on the Russian-speaking dark web. The forum statistics panel also notes how the forum hosts over 2.2 million user posts scattered across 37,310 unique topics to date.