Cybercrime

German Authorities Take Down ‘Crimemarket’ Cybercrime Website

With over 180,000 users, Crimemarket was a trading hub for narcotics, cybercrime tools, and crimeware guides.

With over 180,000 users, Crimemarket was a trading hub for narcotics, cybercrime tools, and crimeware guides.

Authorities in Germany last week announced the takedown of the cybercrime marketplace ‘Crimemarket’ and the arrest of six people believed to be linked with its operations.

Crimemarket, authorities say, was the “biggest illegal, German-speaking online trading platform”, enabling miscreants to trade narcotics, weapons, cybercrime tools, and illegal services (including money laundering, cybercrime, and guides for criminal activities).

Available both on the dark web and the surface web, the marketplace had roughly 180,000 registered users when law enforcement seized its domain.

According to the Dusseldorf police, the investigation into Crimemarket and the whereabouts of its operators has been ongoing for several years, and culminated on February 29 with the execution of 102 search warrants, mainly in the North Rhine-Westphalia region.

Three individuals were arrested in North Rhine-Westphalia, including a 23-years old individual believed to be the mastermind behind Crimemarket. Three other suspects were arrested in other regions, the police announced.

During the searches, law enforcement seized evidence such as mobile phones and IT equipment, as well as narcotics and roughly €600,000 (~$650,000) in cash and movable assets.

Advertisement. Scroll to continue reading.

German police have started studying the seized evidence and data as its investigation stretches beyond Crimemarket’s administrators, to include the portal’s traders and users.

Likely to collect further information, police left Crimemarket’s surface web landing page accessible and prompting visitors to log in.

Crimemarket’s takedown comes only two months after German authorities announced the seizure of servers supporting Kingdom Market, another marketplace for narcotics, malware, fake documents, and criminal services that had hundreds of sellers and tens of thousands of user accounts.

Related: US Says 19 People Charged Following 2019 Takedown of xDedic Cybercrime Marketplace

Related: US Announces Takedown of Card-Checking Service, Charges Against Russian Operator

Related: US Announces IPStorm Botnet Takedown and Its Creator’s Guilty Plea

Related Content

Cybercrime

Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies.

Cybercrime

Nathan Austad has been ordered to pay roughly $1.8 million in forfeiture and restitution, and the sentence also includes 3 years of supervised release. 

Malware & Threats

Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta.

Cybercrime

26-year-old Abdellah Belmili faces up to 30 years in prison for allegedly operating the marketplaces Market0Day and Spoxy.

Cybercrime

Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026.

Malware & Threats

Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.

Cybercrime

Oleksii Oleksiyovych Lytvynenko admitted to working on the development of a loader for the Conti gang.

Cybercrime

Researchers say the OnyxC2 malware targets more than 200 applications and extensions while evading detection through encrypted payloads, DLL sideloading, and in-memory execution techniques.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version