Is it deep or dark?
In Moscow, a striking scene unfolds as a black bus with a large QR code sits abandoned on a busy street. It blocks lanes, creating a traffic hazard and drawing curious drivers who scan the code with their phones. The link leads to Kraken, a drug storefront on the dark web. Competing networks like OMG soon copycat the move, projecting logos on city buildings and broadcasting a bold message to the world, as if signaling a challenge to the status quo.
These audacious stunts are part of a larger, ongoing battle in the so-called drug marketplace on the deep and hidden corners of the internet. The deep web houses pages that require special tools to access, while the dark web, a smaller segment, concentrates the most illicit activity, including drugs, stolen databases, and even more alarming items. Transactions on these sites are typically handled with cryptocurrencies and rely on a culture of secrecy.
Kraken, OMG, Solaris, Hydra, and Mega are among the notable marketplaces cited in this space. Some have been shut down by law enforcement, while others persist in various forms. The sector is dominated by players from Russia and Ukraine, a dynamic set against a backdrop of broader geopolitical tensions. The drive to control this illicit economy fuels efforts to outmaneuver rivals through hacking, data theft, and other covert strategies, all aimed at a market valued in the billions of euros. Governments and security agencies monitor these trends as a hybrid form of warfare expands across multiple domains.
In this environment, even high-level actors have shown themselves—sometimes publicly—leading experts to discuss the widening reach of criminal networks and their use of the dark web to dodge traditional enforcement. The Kremlin, in discussions about modern warfare, has been cited in analyses as playing a role in these hybrid strategies that blend cyber operations with real-world impact.
What is the difference between the Deep Web and the Dark Web?
For newcomers, the distinction is not always clear. A cybersecurity expert explains that the Deep Web includes parts of the internet not accessible through standard search engines. Access often requires specialized tools and credentials. Within this broader space lies the Dark Web, a much smaller subset where illegal activities find a marketplace. The same expert notes that drugs, stolen records, and even sensitive medical data can appear there, with payments commonly conducted in cryptocurrencies, a system designed to maintain anonymity.
Another common thread is the presence of highly secretive forums and marketplaces that operate by invitation or through complex access methods. The reality is that risks on the Dark Web extend beyond substances to data breaches and even some forms of exploitation. As enforcement agencies study these networks, they emphasize the importance of digital literacy and protective measures for at-risk populations, particularly younger users who may encounter these sites through various channels.
Silk Road
Long before the current wave, a pioneering dark web marketplace made headlines. Founded by a programmer from the United States, Silk Road emerged as a platform for illegal substances, operating within the privacy of the Dark Web. Legal authorities highlighted the scale of its activity, reporting billions in sales and substantial profits over a short period. The operation was shut down by federal authorities, and the founder faced serious penalties. The closure demonstrated how quickly such platforms can rise and fall, while also underscoring the enduring appeal of illicit markets that mirror mainstream online commerce in structure but differ radically in legality.
Silk Road’s model showed how a discreet shopping experience could coexist with a secure payment system and discreet delivery methods. After a transaction, operators would provide coordinates or directions to a pickup point, leveraging various concealment tactics to avoid detection. This approach helped sustain demand across illicit product categories for a time, highlighting the persistent challenge for authorities seeking to disrupt supply chains that adapt rapidly to enforcement measures.
Hybrid warfare
The trajectory of these markets has intersected with broader cyber activities. A prominent Russian platform emerged after the merger of two forums, expanding its reach across several neighboring countries. The landscape shifted as rival groups from different regions pursued similar strategies, contributing to a competitive ecosystem that operates across borders. Analysts describe it as a hybrid warfare arena where cyber operations, information narratives, and real-world influence combine to shape outcomes in unexpected ways.
This marketplace grew to become a major player in the global illegal drug trade on the dark web, handling substantial sums and capturing a significant share of the market. Law enforcement actions have targeted key nodes in this network, including currency holdings and leadership, while other groups pivoted to new forums and platforms. When the leaders are weakened, rivals rise to fill the gap, perpetuating a cycle of disruption and adaptation across the digital underworld.
In recent years, groups linked to state-backed or state-adjacent actors have emerged, sometimes drawing attention from government agencies concerned about cyber threats and information operations. As narratives about hybrid warfare spread, experts stress the need to understand the interconnected nature of cyber and real-world actions and how they influence public perception, security policies, and consumer safety.
Authorities and researchers alike remind the public that these platforms are tied to criminal activity and risk exposure for users who may encounter them accidentally. Security professionals emphasize the value of awareness and safe online behavior, particularly for younger audiences who may be drawn toward sensational or easily accessible content in urban environments.
This is the current state of affairs: illicit markets persist, though they face ongoing pressure from law enforcement, cybersecurity firms, and coordinated international efforts. The competition to attract users and establish trust inside the dark web is intense, but the same networks that offer anonymity can also lure unwary participants into dangerous or illegal acts. The tension between opacity and public visibility continues to shape how these markets evolve and how authorities respond.