cyber daily logo

Breaking news and updates daily. Subscribe to our Newsletter

Breaking news and updates daily. Subscribe to our Newsletter X facebook linkedin Instagram Instagram

Nemesis Market dismantled by German law enforcement

German authorities have brought down a major cyber crime market this month, leading to the website going down and money being confiscated.

user icon Daniel Croft
Mon, 25 Mar 2024
Nemesis Market dismantled by German law enforcement
expand image

Launched in 2021, Nemesis Market is a darknet marketplace based in Lithuania and Germany, on which users buy and sell cyber crime services such as ransomware and DDoS attacks, stolen data such as financial information, and drugs.

The market largely adopts a no-holds-barred policy when it comes to what is bought and sold, with the only strict rules prohibiting the sale of child abuse and child pornography, weapons, Fentanyl-based drugs, and hitmen and other contract-killing services.

On 20 March 2024, the Federal Criminal Police Office in Germany (BKA) and the Frankfurt cyber crime combating unit (ZIT) launched an attack on Nemesis Market, seizing its website and preventing its peak 150,000 user base and 1,100 sellers from accessing it.


Those attempting to access the website are greeted with a seizure banner notifying users of the takedown.

“THIS PLATFORM HAS BEEN SEIZED,” the banner reads “...by the Federal Criminal Police Office in Frankfurt am Main in the course of an international coordinated law enforcement operation.”

Additionally, the law enforcement agencies confiscated approximately US$100,000 in cash.

According to the BKA, the seized data will be used in other investigations in tracking down cyber criminals.

“The seized marketplace data forms the basis for further investigations against criminal sellers and users of the platform,” said the BKA in a press release.

“The shutdown and prosecution are a further blow to underground economy actors operating on the dark web and demonstrate the effectiveness of international law enforcement in the digital space.”

The BKA did not say if any arrests were made in the takedown of the marketplace, but the securing of cash suggests physical action was conducted and that there was likely interaction with admins or others with connections to the marketplace.

Law enforcement agencies worldwide have been busy dismantling threat groups and online forums and marketplaces in recent months, with both the LockBit and ALPHV ransomware gangs suffering from global takedowns.

Nemesis Market is also the second marketplace the BKA has taken down in recent months, with the agency, late last year, disrupting the infamous Kingdom Market.

“We proudly announce that the kingdom has fallen!

“Thank you for your cooperation.

“To be continued…”

At least one admin for the marketplace has been arrested in the US. Alan Bill, a Slovakian man who went by “Vend0r” or “KingdomOfficial”, was arrested on 15 December 2023, according to court documents.

The BKA then continued with investigations to track down the market’s leaders.

Daniel Croft

Daniel Croft

Born in the heart of Western Sydney, Daniel Croft is a passionate journalist with an understanding for and experience writing in the technology space. Having studied at Macquarie University, he joined Momentum Media in 2022, writing across a number of publications including Australian Aviation, Cyber Security Connect and Defence Connect. Outside of writing, Daniel has a keen interest in music, and spends his time playing in bands around Sydney.

cd intro podcast

Introducing Cyber Daily, the new name for Cyber Security Connect

Click here to learn all about it
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.