Spanish Police Arrest Administrator of Major Dark Web Marketplace CrimeNetwork
Severity: Medium (Score: 55.8)
Sources: Amp.Majorcadailybulletin, Escudodigital
Published: · Updated:
Keywords: crimenetwork, police, administrator, arrested, platform, dark, calvia
Severity indicators: pla, rat
Summary
Spanish police, in collaboration with German authorities, arrested the alleged administrator of CrimeNetwork, a dark web platform with over 100,000 registered users. The platform facilitated the trade of illicit goods and services, including drugs, forged documents, and stolen banking data, operating under a 'Crime as a Service' model. The investigation, initiated in January 2023, involved multiple security measures taken by the suspect to evade capture. Following extensive surveillance, police conducted searches in Mallorca, seizing numerous computer devices. The operation resulted in the blocking of the CrimeNetwork server, redirecting users to a site controlled by authorities. Four additional arrests were made in Germany as part of the operation. The suspect has been remanded in custody after appearing in court. Key Points: • CrimeNetwork had over 100,000 users and facilitated various illegal activities. • The investigation began in January 2023, initiated by German authorities. • The platform operated exclusively on the TOR network and utilized an escrow system for transactions.
Detailed Analysis
**Impact** Over 100,000 registered users of the CrimeNetwork dark web marketplace were affected, spanning primarily German-speaking regions and extending to Spain where the administrator was arrested. The platform facilitated illicit trade in drugs, forged documents, stolen banking data, phishing tools, and unauthorized access to digital services, impacting sectors including finance and digital security. The takedown disrupted criminal operations relying on the Crime as a Service model, potentially reducing availability of these illegal goods and services across Europe. **Technical Details** CrimeNetwork operated exclusively over the TOR network using an escrow system for cryptocurrency transactions, with administrators taking commissions on completed trades. The administrator employed operational security measures such as multiple residence changes to evade detection. Law enforcement seized numerous computer devices during coordinated searches in Mallorca and Germany. The platform’s server was seized and redirected to a law enforcement-controlled page displaying an awareness video. No specific malware, CVEs, or IOCs were disclosed in the sources. **Recommended Response** Organizations should monitor for darknet activity referencing CrimeNetwork and related marketplaces, focusing on cryptocurrency transaction patterns and phishing tool indicators. Security teams should maintain vigilance for forged document and stolen banking data usage in their environments. Law enforcement coordination and intelligence sharing with international partners remain critical. No specific patches or CVEs were identified; defenders should prioritize monitoring and threat intelligence updates related to darknet marketplaces.
Source articles (2)
- Mallorca crime: Administrator of the “dark web” criminal platform Crimenetwork arrested in Calvia — Amp.Majorcadailybulletin · 2026-06-04
The National Police , in a joint investigation with the German authorities, have arrested the administrator of Crimenetwork in Santa Ponsa , Calvia . Crimenetwork is considered one of the main crimina… - Spanish police dismantle 'CrimeNetwork' platform, arrest administrator — Escudodigital · 2026-06-04
With over 100,000 registered users, the dark web marketplace facilitated the trade of drugs, forged documents, stolen banking data, and cybercrime tools The National Police have arrested the alleged a…
Timeline
- 2023-01-01 — Investigation into CrimeNetwork initiated: German authorities requested international cooperation to locate a suspect running CrimeNetwork.
- 2024-02-12 — Previous CrimeNetwork platform shut down: The original CrimeNetwork platform was dismantled by German authorities in a major operation.
- 2026-06-04 — Administrator arrested in Mallorca: Spanish police arrested the CrimeNetwork administrator in Calviá, Mallorca, following a joint operation with German authorities.
- 2026-06-04 — CrimeNetwork server blocked: The server hosting CrimeNetwork was blocked, redirecting users to a page controlled by German authorities.
- 2026-06-04 — Four arrests made in Germany: Simultaneously, German authorities arrested four individuals linked to CrimeNetwork's operations.
Related entities
- Phishing (Attack Type)
- Operation Palmar (Campaign)
- Germany (Country)
- service.in (Domain)
- Tor Network (Platform)
- Tor (Platform)
- Phishing Kits (Tool)
- Phishing Tools (Tool)