Cyber Security News

Crimenetwork Bust Reveals 22,000 Members and Over 100 Illicit Vendors

Law enforcement authorities have successfully dismantled the relaunched version of “Crimenetwork,” a prominent criminal online trading platform.

A 35-year-old German citizen, suspected of operating the illicit platform, was apprehended at his residence in Mallorca, Spain, by a special unit of the Spanish National Police acting on a European Arrest Warrant.

Crimenetwork Bust Reveals Illicit Vendors

In an internationally coordinated operation, the Frankfurt am Main Public Prosecutor’s Office and the Federal Criminal Police Office (BKA) shut down the marketplace on Wednesday.

The dismantled infrastructure was established mere days after the original “Crimenetwork” was taken offline, and its previous administrator was arrested in December 2024.

The accused allegedly built and administered a completely new technical environment to continue serving the German-speaking underground economy.

This relaunched platform quickly regained traction among threat actors, expanding to host over 22,000 registered users and more than 100 active vendors.

The marketplace facilitated the exchange of a wide array of illicit goods and services, heavily featuring stolen data sets, narcotics, and forged identification documents.

To process these illegal trades, transactions were exclusively conducted using mainstream and privacy-focused cryptocurrencies, specifically Bitcoin, Litecoin, and Monero, which were utilized to obscure the financial trails of cybercriminals and buyers.

Extensive digital evidence secured during the operation indicates that the relaunched platform generated revenue exceeding €3.6 million during its operational lifespan. The marketplace’s financial model relied heavily on a structured fee and taxation system.

The platform operator extracted commissions on processing illicit sales while requiring sellers to pay recurring monthly fees to maintain advertising privileges and vendor licenses.

During the raid, authorities executed the preliminary seizure of approximately €194,000 in physical and digital assets suspected of being directly tied to the marketplace’s daily operations.

Furthermore, digital forensic investigators successfully obtained comprehensive user databases and transaction logs from the servers.

This massive trove of data provides critical intelligence leads that will enable law enforcement to trace the platform’s predominantly German-speaking customer base and map out the broader criminal supply chain.

The successful takedown represents a major collaborative effort between German entities and international partners, including the Spanish Policía Nacional, Moldovan cybercrime units, and Eurojust.

The arrested suspect now faces severe charges under the German Criminal Code for operating criminal trading platforms on the internet, alongside additional charges for trafficking substantial quantities of narcotics.

This arrest directly follows the severe legal precedent set in March 2026, when the operator of the previous Crimenetwork iteration received a seven-year, ten-month prison sentence, along with a court order to confiscate over ten million euros in criminal proceeds.

The coordinated operation shows ongoing monitoring of dark web infrastructure and the rapid response capabilities of global law enforcement to prevent dismantled cybercriminal networks from successfully rebuilding their illicit operations.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction

Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious…

21 minutes ago

ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers

An autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is…

51 minutes ago

Shopify Makes IP Allowlisting Mandatory for All Public Apps to Prevent Stolen API Token Abuse

Shopify is making IP allowlisting mandatory for all public apps to limit abuse of stolen…

1 hour ago

OpenAI’s New GPT-6 Cyber Finds 81 High-Severity Firefox Vulnerabilities and 948 Linux Kernel Exploits

OpenAI has introduced GPT-6 Cyber, a security-focused model built to find and validate exploitable vulnerabilities…

1 hour ago

OpenMatter Network Positions Decentralized Computing as an Alternative to Data Centers for AI

Melbourne, Florida, November 5th, 2026, CyberNewswire OpenMatter Network, a pioneer in decentralized infrastructure for agentic…

13 hours ago

China-Aligned Hackers Hijack Popular Sogou Keyboard Software to Secretly Install DarkVigil Malware

A China-aligned espionage group abused the update traffic of Sogou Input Method, one of China's…

18 hours ago