Law enforcement agencies monitor it for criminal activities, but legitimate users rely on it for privacy protection. In order to investigate the role of direct transactions between market participants, we now analyse the evolution of the S2S network, i.e., the network of the U2U transactions involving only sellers. Although the S2S network is composed only of U2U transactions, all categories of sellers (i.e, market-only, U2U-only, and market-U2U) are present in the S2S network. For instance, market-only sellers are entities classified as sellers only in markets, but that may promote U2U transactions with other sellers, hence being part of the S2S network. Therefore, the S2S network can be seen as a proxy for a distribution network of illegal products.
This encouraging sign points to the continued adoption of crypto globally. Among the most prominent threats on the darknet, KELA observed leaks and sales of Japanese entities’ data. While many offers are related to regular users, some actors are specifically looking for corporate data of Japanese organizations. In the wake of recent headlines announcing actions against Hydra Marketplace by the U.S. and German governments, darknet markets have made an ironic entrance into the spotlight.

Cybersecurity Workforce Trends In 2025 – Skills Gap, Diversity And SOC Readiness
- Some sellers offer cracked versions of expensive software that you’d typically pay hundreds of dollars for.
- The browser uses onion routing technology to route the internet traffic through multiple relay nodes that provide layered encryption.
- The technology behind the darknet is actively maintained and continues to evolve.
- Every potential participant’s credentials must be vigorously vetted before they can join.
Torzon market made its debut in September 2022, and ever since, it has been on an upward trajectory. In fact, it now features more than 11,600 illegal items, which include hacking tools, hard drugs, and all types of cybercrime services. Everything is in English, but users from around the world are welcome. You’ll get stolen credit cards, remote desktop account info, personal details, and various logs.

Moreover, this shop provides detailed statistics about each user profile on the platform, giving users a better idea about the vendors for the buyers and vice versa. This marketplace accepts payments via Monero but also supports the Escrow system. Tor2door powers 25,000+ listings and $4.5M monthly trades via BTC and XMR, holding a 7% share. Its 13,000+ users and 1,100+ vendors rely on a secure, fast-paced trading network.
However, in April 2022, this site went offline after American and German federal government law enforcement agencies seized the website servers. Some alternative links are available, providing access to the marketplace. It’s recommended not to use new alternative links as they could just be planned exit scams. Another dark net marketplace that has grabbed a lot of attention is the Hydra market.
Microsoft Strengthens Security After China-Linked Attacks

Tor2door’s been a standout since 2020—over 20,000 listings and a custom-built site that’s not some cookie-cutter junk. They take BTC and Monero, with multi-signature escrow and global shipping—vendors swear by it, and I’ve snagged rare stuff (think DMT or niche scripts) without a hitch. Drugs lead the pack—weed, pills, some synthetics—but digital goods like hacked logins are gaining, tying into Telegram’s side gig boom. For 2025, they’re teasing AI-powered search—could make digging through listings a breeze, which I’m hyped for since their catalog’s already hefty. The site’s unique—loads fast, looks sharp, and vendors get treated right, keeping turnover low.
Run Antivirus/Anti-Malware Software
Launched after the takedown of AlphaBay in 2021, Abacus Market has rapidly risen to prominence. It features over 40,000 listings including narcotics, counterfeit items, hacking tools, and stolen data. The marketplace is well-known for its bug bounty programs and robust security mechanisms, including mandatory 2FA. Drughub Market specializes in pharmaceuticals, offering 15,000+ listings and $2 million monthly via BTC. With 8,000+ users and 600+ vendors, it commands a 10% share of darknet drug trades—a rising star since 2023. Ideal marketplaces support anonymous browsing through networks like Tor and I2P, utilize privacy-focused cryptocurrencies such as Monero, and implement measures to prevent tracking and transaction tracing.
🛡️ How Axis Intelligence Strengthens Cybersecurity
The FBI tied Taiwanese national Rui-Siang Lin, Incognito’s operator, to the DNM’s website by tracing crypto transfers to an exchange account in Lin’s name. Lin was charged with a host of crimes, and by May, federal authorities in New York had arrested him. Alphabay rose to prominence with 400,000+ users and $600M yearly trades, ending in a 2017 bust. We’re back with another video in our Webz Insider video series on everything web data. Learn how to automate financial risk reports using AI and news data with this guide for product managers, featuring tools from Webz.io and OpenAI.
Our On-chain Analysis On Fraud And Scam Cases In Japan

These marketplaces are full of risks (security, legal, ethical issues – all of them). But if you still decide to access these websites, for education or research purposes, make sure you stay cautious. The world of the darknet has always attracted the attention of the masses. Dark markets continually adapt and evolve to stay ahead of law enforcement and security measures.
How Much Is Stolen Data Sold For On Darknet Markets?

Besides ever increasing hosting costs, the site will have to contend with authorities, attacks from hackers, and the occasional disgruntled market administrator. I do not condone the use of DNMs to purchase or sell drugs and other illegal materials online. DNMs are inherently dangerous places and its users risk losing their money, their freedom, and their lives.Are you suffering from drug addiction? Tor2door’s a standout since 2020 with 20,000+ listings and a custom design that’s not off-the-shelf junk. BTC and Monero accepted, with multi-signature escrow and global shipping—vendors love it, and I’ve seen why after snagging some rare stuff hassle-free. Drugs dominate, but digital goods are picking up—ties into the Telegram trend with side hustles.
Abacus Market appeared on the scene in 2021 and quickly became one of the heavyweights among English-speaking markets on the dark web. The categories are well organized, ranging from drugs and fraud to digital products, guides, and malware.What really sets it apart is its focus on security and usability. It supports PGP encryption, two-factor authentication (2FA), alerts against fake sites (antiphishing), and a verification system for sellers. Its interface is easy to navigate, and it has a reliable escrow system, as well as allowing payments with Bitcoin and Monero. All of this has made it one of the most reliable markets still active in 2025. Dark web marketplaces have been a significant outlet for illicit trade, serving millions of users worldwide for over a decade.
Malware Sales
The cost can be exorbitant, but for victims, it’s always higher and devastating. For instance, stolen data can result in unauthorized payments, the draining of accounts, or even registered loans. The sad reality is the fact that law enforcement agencies can’t track and prosecute perpetrators or even take down such content given the anonymous nature of the dark web. As much as authorities work hard to shut down various sites, it shows what the dark web is capable of doing if left unchecked.
MOST LAW ENFORCEMENT DARKWEB OPERATIONS ORIGINATE INTERNATIONALLY LOCAL CAPABILITY IS LIMITED
It supports operations in multiple languages and operates on both clearnet and Tor. Revenues for the fraud shops on the right side of the chart declined, suggesting their dependence on UAPS for payment infrastructure. Conversely, some fraud shops saw an increase in activity and higher revenues on-chain.
The resulting data set includes for each transaction the source and destination entities, the time, and the value of the transaction. This suggests that the multiseller activity is sensitive to external shocks but also that it yields higher profits. The number of multisellers steeply decreases after operation Bayonet but they still sustain high incomes. Nevertheless, by analysing the income of each multiseller, we observe that the median income still reflects their high income, as shown in Fig.