As the digital landscape constantly evolves, so does the world of cybercrime. The fall of prominent dark web marketplaces, reshaping geopolitical dynamics, and the ever-evolving tactics of cybercriminals, all contribute to the continually shifting landscape. This article delves into the future of cybercrime, focusing on the evolution of dark web marketplaces and the emerging threats.
The Hydra Market Takedown
The Hydra Market, a Russian-speaking darknet market, held the title of the largest among its kind, with a staggering $1 billion turnover in 2020. It was a significant hub of the dark web, responsible for 80% of the activity. However, in 2022, a joint operation by German and US law enforcement led to the shutdown of Hydra’s Germany-based servers, seizing $25 million worth of Bitcoin in the process.
This operation didn’t merely disrupt the drug trade; it struck a massive blow to the Russian-speaking dark web ecosystem. Yet, with the Hydra servers out of commission, users sought refuge elsewhere, primarily congregating in the RuTor forum. However, the fear of law enforcement pursuing Hydra clones led to widespread paranoia, particularly following the capture of Hydra’s co-founder, Dmitry Pavlov.
The Dark Web Marketplaces Landscape
Dark Web Marketplaces (DWMs) serve as the online black markets for illegal products and services. These markets, which gained momentum in 2011 with the advent of Silkroad, have seen a steady rise in activity. However, the subsequent closure of Silkroad by the FBI and other significant markets like Hydra and RAMP dealt a blow to the dark web activities, leading to the emergence of other underground markets.
The fall of Hydra led to a vacuum that was promptly filled by new illicit markets. These primarily Russian-speaking markets quickly took over 80% of the entire illegal ecosystem. While more than 70 DWMs were observed at the end of last year, the four major Russian markets now control 80% of the total volume. The western bitcoin-based market ASAP Market is the fifth largest, holding 7% of the total market volume.
The Role of Cybercriminals in DWMs
While the primary products in DWMs are drugs, it’s crucial to note that cyber threat actors also frequent these markets. Data, tools, or services related to cybercrime, such as Stealer as a Service (SaaS), one of the recent cyber attack vectors, can be found in these black markets.
Among the most significant cybercrime-related products in terms of numbers are DDoS for hire services, RDP accesses, and credentials. However, in terms of value, data such as VIP credentials and databases stand out.
The Future of Dark Web Marketplaces
The void left by Hydra was quickly filled, with dozens of new illicit markets emerging. These markets, mostly Russian-speaking, repopulated a significant portion of the entire illegal ecosystem.
Although more than 70 DWMs were observed at the end of last year, the four big Russian markets divide 80% of the total volume among them, while the western bitcoin-based market ASAP comes in 5th place with 7%. All the remaining DWMs have only 13% of the total market volume.
Infinity: Cybercrime Under a Hacker Forum
In addition to dark web markets, hacker forums are another platform where sales are made. The Infinity Forum, launched in January 2023, brought together many Russian hacker groups and the cyber underground world. The forum’s Hack Shop section, which offers many tools and exploits for sale, poses a significant cyber threat.

The Role of Cryptocurrencies in DWMs
Modern DWMs heavily rely on cryptocurrency transactions, particularly Bitcoin. According to some researchers, DWMs are one of the mechanisms that keep the crypto market alive. Hydra Market alone reached a $5 billion trading volume from 2015 to 2022, contributing significantly to the crypto market volume.
Russia-Ukraine War’s Impact on the Dark Web
The onset of the Russia-Ukraine war has significantly impacted the dark web. Particularly, Russian-speaking cybercriminals, who constitute a large part of the dark web population, have seen a shift in their activities.

Future Threats in the Cybercrime Landscape
Considering the recent growth, Dark Web Markets are likely to reach larger transaction volumes. These black markets, which trade in data sets, data leaks, malware, and exploits, pose a significant threat to every institution.
The Future of Cybercrime: The Final Word
Cybercriminals are creatures of habit, and despite the collapse of major dark web marketplaces, they continue to flock to existing and new platforms that promise security and a wide range of illicit products and services. While the landscape is continually shifting, one thing remains constant – the need for vigilance and proactive measures against the evolving threats in the cybercrime landscape.
Leave a Reply