Law enforcement bodies dismantles darknet platform involved in illegal hacking services, sale of stolen databases and drug trafficking

Law enforcement bodies have dismantled the activities of an organized criminal group that operated Crimenetwork platform – one of the most active darknet markets dedicated to cybercrime. The operation was carried out in cooperation with law enforcement authorities from Germany, the Spanish police and EUROJUST.

The platform functioned both as an encrypted forum for cybercriminals and as an illegal online marketplace, being used for the sale of stolen data, including information about bank cards, login credentials and personal documents.

It was also used to distribute tools intended for cyberattacks, such as malware, ransomware and DDoS attack services. Another activity involved facilitating their illicit operations, including anonymous hosting and money laundering.

The platform had over 22,000 users and more than 100 active vendors, and transactions were carried out via cryptocurrencies. Following special investigative measures, authorities gathered evidence indicating that the platform generated revenues of over 3.6 million euros. The platform’s operator charged commissions for completed transactions, while vendors paid monthly fees for advertising and trading licenses.

The investigation established that the platform’s technical infrastructure was hosted on the servers of a company in the Republic of Moldova. In this context, investigative officers played an essential role in monitoring and documenting the criminal activities carried out through the server hosting the platform. Thus, as part of the investigative actions, the “Crimenetwork” platform was seized.

The main suspect, a 35‑year‑old German citizen, was detained at his home in Mallorca by a special unit of the Spanish National Police, on the basis of a European arrest warrant. During the searches, goods and material assets directly related to the criminal activities of the platform, estimated at approximately 194,000 euros, were seized.

Criminal proceedings are ongoing, including the examination of devices and data storage media seized during the operation.