Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

US Sanctions Iranian Administrator of Nemesis Darknet Marketplace

Iranian national Behrouz Parsarad sanctioned for running Nemesis, a marketplace used for narcotics trafficking and cybercrime. 

Sanctions

The US Treasury Department on Tuesday announced sanctions against an Iranian national accused of running an online darknet marketplace used for trading drugs and cybercrime services.

The marketplace, named Nemesis Market, was shut down in March 2024 as a result of a law enforcement operation conducted by Germany, the US and Lithuania. 

German authorities announced after the takedown of Nemesis server infrastructure that more than 150,000 user accounts and over 1,100 seller accounts were registered on the site, which was accessible on the Tor network.

Nemesis provided a platform for drug trafficking and the trade of fraudulently obtained goods and data, as well as cybercrime services such as DDoS attacks, phishing, and ransomware. 

The Treasury Department announced sanctions against Iran-based Behrouz Parsarad, who is believed to be “the sole administrator of Nemesis”.

The sanctions are mainly over Nemesis’ use for narcotics trafficking, with authorities saying that the marketplace facilitated the sale of nearly $30 million worth of drugs between 2021 and 2024.

Advertisement. Scroll to continue reading.

Parsarad, who allegedly held full control over the website and its cryptocurrency wallets, pocketed millions of dollars through the fees he charged on every transaction. He also helped Nemesis users launder funds.

“Since the takedown of Nemesis, Parsarad has discussed setting up a new darknet marketplace to take the place of Nemesis with vendors that were once active on the marketplace,” the Treasury Department said. 

Related: Leader of North Korean Hackers Sanctioned by EU

Related: European Union Sanctions Russian Nationals for Hacking Estonia

Related: Russian Cybercrime Network Targeted for Sanctions Across US, UK and Australia

Related: Treasury Levels Sanctions Tied to a Massive Hack of Telecom Companies and Breach of Its Own Network

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

SolarWinds has appointed Justin Henkel as Chief Information Security Officer.

J. Paul Haynes has joined Cinchy as Chief Executive Officer.

Hatem Naguib has become Chief Executive Officer at Sysdig.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.