In another major blow to organized cybercrime in Europe, German law enforcement authorities have shut down a new version of the notorious Crimenetwork , Germany’s largest illegal online cybercrime marketplace, and arrested the platform’s alleged operator , marking another success in the ongoing war against darknet criminal ecosystems.

The operation was carried out by the Bundeskriminalamt, the Central Cybercrime Office and the Spanish authorities, with the arrest taking place in Mallorca, where the 35-year-old suspect was located.
The case highlights once again that, despite the apparent anonymity offered by the darknet, law enforcement authorities are acquiring increasingly effective tools to identify and dismantle illegal digital networks.
See also: Polish security service reports ICS violations at water facilities
The history of Crimenetwork and its dominance of the German darknet
Crimenetwork was not a random criminal platform. Since its founding in 2012, it has grown into one of the most important illegal trading hubs on the German-speaking side of the darknet, gathering more than 100,000 registered users.
The platform hosted a wide range of illegal activities, including:
• Selling stolen personal data
• Trafficking of illegal substances
• Hacking and ransomware services
• Fake documents and digital identities
• Malware kits and hacking tools
The marketplace's operation resembled legitimate trading platforms, with user ratings, escrow systems, and transaction protection mechanisms, offering cybercriminals a highly organized environment.
The first dislocation and the rapid return
By the end of 2024, German authorities had already managed a strong blow against the original platform, seizing servers, collecting critical data , and arresting one of the key administrators.

However, just a few days after the shutdown, a new version of Crimenetwork appeared.
The new marketplace was hosted on a different technical infrastructure, with a new backend and different protection mechanisms against seizures and digital surveillance.
See also: Attackers can exploit AI VLM models
Although technically redesigned, it maintained the same name and the same business model, attempting to exploit the already strong brand recognition it had acquired in the cybercrime field.
The impressive financial figures
The second version of Crimenetwork operated for a relatively short period of time, but the data collected by the authorities reveals the extent of its activity.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The platform managed to gather:
• More than 22,000 active users
• Over 100 verified vendors
• Revenue exceeding 3.6 million euros
At the same time, approximately 194,000 euros in assets considered to be the product of illegal activities were seized.
Even more important is the authorities' access to user data, transaction history and account information, data that may lead to a new wave of arrests.
The new reality of digital crime
The case of Crimenetwork highlights a new trend in the field of cybercrime: the rapid resurgence of illegal marketplaces.
When a platform collapses, the community often migrates to new infrastructure in no time, leveraging backup data, mirror systems, and decentralized communication channels.
See also: Crypto theft: 6.5 years in prison for gang member
This creates a game of constant pursuit between authorities and administrators. Criminal markets now operate like darknet startups, with technical agility, branding strategies, and customer retention mechanisms.

The authorities' message to the darknet
The director of the German federal police, Carsten Meywirth, was clear: the message to those who consider the darknet a safe haven is that anonymity is no longer a guarantee.
The recent sentencing of the original administrator of Crimenetwork to almost eight years in prison, along with the confiscation of over 10 million euros, demonstrates that the consequences are now extremely serious.
The battle continues
Despite the success of the operation, experts point out that the disruption of a marketplace does not mean the end of the phenomenon. The real challenge lies in the dismantling of the trust networks that support these platforms. And as authorities gain access to more and more user data, the pressure on the underground cybercrime economy is growing stronger.
Source: www.bleepingcomputer.com
