Cybercrime

Tor-Based Drug Marketplace Piilopuoti Shut Down by Law Enforcement

Finnish authorities have seized the drugs marketplace Piilopuoti, which has been operating on the Tor network since May 2022.

Finnish authorities have seized the drugs marketplace Piilopuoti, which has been operating on the Tor network since May 2022.

Authorities in Finland and Europol on Tuesday announced the seizure of Piilopuoti, a drugs marketplace operating on the Tor network since May 2022.

Designed to facilitate free and anonymous internet browsing and communication, the Tor network is also used by cybercriminals to conduct illegal activities, including the sales of malware, drugs, weapons, and other illicit goods.

A Finnish-language website, Piilopuoti was opened last year as a hidden service, enabling the anonymous trade of narcotics that were typically smuggled into Finland from abroad, the Finnish authorities say.

Finnish Customs investigated the dark web site in cooperation with German and Lithuanian authorities, Europol, Eurojust, and private cybersecurity companies.

Following the takedown, authorities seized the contents of the site’s web server and replaced the domain’s homepage with a warning that it had been seized.

Specific details on the takedown, however, are not being released now, as the investigation into the matter continues, Finnish Customs announced.

Advertisement. Scroll to continue reading.

Commenting on the seizure, multiple cybersecurity companies, including Bitdefender, which assisted with the investigation, have underlined the need for cooperation between authorities and the private sector in investigating and taking down similar illicit sites.

“This operation underscores the power of collaboration between the public and private sectors in disrupting illegal online activities. It serves as a clear message to criminals who believe they are untouchable on the dark web: international efforts will bring them to justice,” Bitdefender senior director Alexandru Catalin Cosoi said in an emailed comment.

WithSecure’s Tim West pointed out that the takedown of a dark web marketplace is no easy feat, and that such actions require “an incredible amount of dedication and collaboration”.

“This is not the first dark web marketplace shutdown this year, with Genesis Market being seized in April. These shutdowns really demonstrate the power of a cooperation across the ‘goodies’ in the fight against cybercrime, especially between the public and private sector,” West said.

Rapid7 chief scientist Raj Samani also points out that this takedown shows that the dark web, which has historically allowed cybercriminals to operate without the fear of being identified, is no longer offering the same level of anonymity.

“Absolute anonymity is no longer a thing, nor is being able to carry out activities on the dark web entirely risk free,” Samani noted.

Related: US Announces Takedown of Card-Checking Service, Charges Against Russian Operator

Related: Success of Genesis Market Takedown Attempt Called Into Question

Related: Industry Reactions to Hive Ransomware Takedown: Feedback Friday

Related Content

Cybercrime

It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments.

Cybercrime

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

Cybercrime

Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.

Cybercrime

Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims.

Artificial Intelligence

The prospect of legal accountability is unclear. Lawsuits are a possibility, but some legal experts believe any criminal investigations would face an extremely high...

Cybercrime

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

Cybercrime

Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world.

Malware & Threats

The shutdown operation involved peer list manipulation and Sality payload URL takedown.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version