Europol reveals German law enforcement was behind the ‘Monopoly Market’ takedown. Europol announced on 2 May 2023 that 288 suspects involved in drug trafficking on the Darknet marketplace “Monopoly Market” have been arrested globally following an unannounced takedown in December 2021. The announcement is the first confirmation that Monopoly Market’s disappearance was the result of law enforcement action.
Users across multiple forums had previously expressed concerns about being victims of an exit scam, where marketplace administrators simply disappear with customers’ funds. Europol said German authorities seized Monopoly Market’s infrastructure more than two years ago, allowing the agency to create intelligence packages that were shared with international partners across Europe as well as in the United States and Brazil.[1]
It is not clear which German authorities were behind the seizure, although Europol described it as happening alongside the seizure of the Hydra marketplace’s infrastructure. Unlike in the Hydra takedown, however, law enforcement did not replace Monopoly Market’s darknet site with a splash page.
The change in investigative tactics netted a record number of arrests for the operation, beating the 150 arrested following the takedown of DarkMarket, and 179 following the takedown of Wall Street Market.
A spokesperson from the general prosecutor's office in Frankfurt, Germany said, “There was no press release at the time the marketplace was shut down in December 2021, as (foreign) investigations were still pending, which should not be jeopardized by a statement.”
In a 2 May news conference, US officials framed the operation within the Biden administration's broader effort to crack down on illegal fentanyl distribution. The pills sold on Darknet marketplaces are often counterfeit and laced with a powerful opioid, the US Attorney General said. He acknowledged that no single operation against Darknet markets will stop the underground economy, but he said law enforcement agencies have noticed that taking out a market does “disrupt the situation for some time. “There is a bit of a Whac-a-Mole problem here, and we are whacking as hard as we can,” he reiterated. “We are getting more and more sophisticated and more and more capable of finding both the perpetrators and the victims and the customers.”
Beyond arrests and seizures of servers, it’s important for governments to warn people about the dangers of buying illegal drugs online, said an FBI Deputy Director. “We're really focused on reaching out to potential victims and better informing them and bringing awareness to the public so that people can put themselves in the best position to protect their own lives,” he said.
Number of SpecTor arrests:
- United States: 153
- United Kingdom: 55
- Germany: 52
- The Netherlands: 10
- Austria: 9
- France: 5
- Switzerland: 2
- Poland: 1
- Brazil: 1
US and Europol officials noted that online drug dealers often use multiple venues. “The vendors arrested as a result of the police action against Monopoly Market were also active on other illicit marketplaces, further impeding the trade of drugs and illicit goods on the dark web,” Europol said.
Europol reported the operation seized more than €50.8 million ($53.4 million) in cash and virtual currencies, as well as 850kg of drugs, including over 258 kg of amphetamines, 43kg of cocaine, 43kg of MDMA and over 10 kg of LSD and ecstasy pills, alongside 117 firearms. It added that several of the suspects were considered “high-value targets” by police, and that investigations to identify additional people behind dark web accounts were still ongoing.
Law enforcement agencies labeled the sweep as Operation SpecTor, after the Tor browser that allows access to the dark web. The DarkMarket operation was called DarkHunTor and the Wall Street Market operation was dubbed DisrupTor.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. For questions, comments, or assistance, please get in touch with the office directly at 1-844-492-7225, or feedback@redskyalliance.com
Weekly Cyber Intelligence Briefings:
- Reporting: https://www.redskyalliance.org/
- Website: https://www.redskyalliance.com/
- LinkedIn: https://www.linkedin.com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://attendee.gotowebinar.com/register/5504229295967742989
[1] https://therecord.media/monopoly-market-arrests-germany-takedown/
Comments