Authorities Take Down Hansa Dark Web Market, Confirm AlphaBay Takedown (bleepingcomputer.com)
An anonymous reader writes via Bleeping Computer: Today, in coordinated press releases, the U.S. Department of Justice (DOJ) and Europol announced the takedown of two Dark Web marketplaces -- AlphaBay and Hansa Market. First to fall was the Hansa Market after Dutch officers seized control over their servers located inside one of the country's hosting providers. Dutch Police seized Hansa servers on June 20, but the site was allowed to operate for one more month as officers gathered more evidence about its clientele. The Hansa honeypot received an influx of new users as the FBI shut down AlphaBay on July 5, a day after it took control over servers on July 4. Europol and the FBI say they collected mountains of evidence such as "usernames and passwords of thousands of buyers and sellers of illicit commodities" and "delivery addresses for a large number of orders." FBI Active Director McCabe said AlphaBay was ten times larger than Silk Road, with over 350,000 listings. In opposition, Silk Road, which authorities seized in November 2013, listed a meager 14,000 listings for illicit goods and services at the time authorities took down the service.
Or you could let people have drugs and sex.
Important thing to note is that these guys weren't caught because of some TOR weakness, but because of essentially non-existent opsec.
The average buyer on one of these sites has only a cursory understanding of opsec. Even the sellers and the site admins often get it wrong, as we see in the story. With probably hundreds of thousands of transactions, and a decent chance of a fuckup from at least one of the parties in each transaction, there's a whole lot of information law enforcement can get from this.
I used to think there was basically no way to fight the emergence of these online markets, but my ideas on that are shifting now. With honeypot operations like this, they can essentially get a huge list of drug users' addresses. Never before has this type of data been amassed on that scale. The worst part of it is that the data set is skewed toward casual users; the dealers typically have better opsec. Additionally, the fact that these packages usually travel over state or national borders significantly ups the legal ante. With assholes like Jeff Sessions in power, I can see large numbers of people getting 30-year sentences for things that many local police departments wouldn't even make an arrest for. Simply because it happened on the internet.