Italian Authorities Seized Berlusconi Market


Italian law enforcement announced the shutdown of Berlusconi Market and arrest of three individuals suspected of running the marketplace. The investigation into the market started in May and investigation into vendors on the marketplace is ongoing.

In an early press release, the Guardia di Finanza announced the arrest of three suspected Berlusconi Market administrators and the seizure of Berlusconi Market. “[The market], with over 100,000 ads, was considered the most reliable illegal resource of the dark web,” the announcement said.

The investigation began with the arrest of G00d00 in May, as reported by Darknetlive and later confirmed by a former administrator of Italian Darknet Community.

The Berlusconi Market Homepage | Guardia di Finanza

The Berlusconi Market Homepage | Guardia di Finanza

The investigation began in May 2019. Law enforcement in Barletta identified a prolific darkweb vendor identified as g00d00 as well as a second individual linked to the darkweb drug trafficking operation. During the investigation into g00d00, Italian authorities seized 2.2 kg of cocaine, ketamine, and MDMA. The vendor(s) had already prepared the drugs for sale on the darkweb. During the raid at g00d00’s house, authorities seized electronics that linked g00d00 to Bitcoin transactions originating from Berlusconi Market. Italian authorities then examined the Bitcoin transactions associated with g00d00 and Berlusconi Market using “the best forensic analysis techniques.” This forensic analysis allowed them to “trace” the administrators of Berlusconi Market.

G00d00 had access to Berlusconi Market’s private key at the time of his arrest, according to HugBunter. HugBunter also noticed that the market had changed the key after the news of the arrest became public.

During the investigation into g00d00 and the second suspect, authorities learned that both suspects had a role in the administration or moderation of Berlusconi Market (in addition to their drug trafficking operation). Forensic analysis of the devices seized from the arrested subjects led to the discovery that “Berlusconi Market was managed by two “nicknames” of which one - VladimirPutin had the role of administrator and the other - EmmanuelMacron had the role of a moderator.”

Note the Use of the v3 Onion Service | Guardia di Finanza

Note the Use of the v3 Onion Service | Guardia di Finanza

“Starting in January 2019, Berlusconi Market became the most important Dark Web market, both in terms of quantity of items for sale and the volume of transactions with over 100,000 advertisements for illegal products,” the announcement said.

Forensic analysis linked “conversations exchanged through instant messaging applications with a third party emerged, which managed to exercise a sort of control over the proceeds linked to the Berlusconi Market sales platform as administrator of the market itself.” Investigators used this information to identify the third subject, a resident of Puglia, Italy.

A Listing on Berlusconi Market | Guardia di Finanza

A Listing on Berlusconi Market | Guardia di Finanza

The three suspects had established a partnership of sorts, according to Italian authorities. They split expenses related to the operation of Berlusconi Market; made management decisions; all three were in possession of administrator credentials; all three split the Bitcoin earned as the marketplace’s staff and/or administrators (the market transacted two million Euros annually, according to the announcement).

The market has been inaccessible for weeks.

The elements gathered thanks to the meticulous investigative activities carried out by the specialized staff of the Privacy Protection and Technological Fraud Unit of the Guardia di Finanza, with the constant coordination of the Public Prosecutor of Brescia, led to the issuance of personal precautionary measures for custody in prison at with three subjects (GDM and GR, residing in Puglia and LDV residing in Puglia and domiciled in Turin). Officials and judicial police officers belonging to the aforementioned Special Unit carried out the measures ordered, also carrying out 5 house searches in Barletta (BT), Andria (BT), Putignano (BA) and Turin. During the searches several technological devices were seized (personal computers, notebooks, digital memories and smartphones) on which the forensic analysis will be subsequently carried out, also to trace the various Black Market vendors.

The Press Release.

Comments (26)

Or Discuss on DreadDo not trust any links posted in the comments section.

N/A

LMAO.

ā€œ[The market], with over 100,000 ads, was considered the most reliable illegal resource of the dark web,ā€ the announcement said.

This is them blatantly stroking their own ego. They wish Berlusconi was that important. In reality 3 new markets have already popped up in its place.

Heater

Sad times! It’s all tracing back to BTC. XMR or bust come on people smarten up. You can still send BTC using xmr.to.

HelloWorld

wtf are people waiting to switch to XMR?? its been years now that it should have been done !

dream vandor

that fucking men arrested he scam my 250$

Coolio

Wow, that’s fucking sad, this was a nice market, fucking police!! Someday DNM will rise. Sometimes I think that police loose their time chasing this guys when the real problem it’s inside politicians, but as we know police and politicians fuck each other every night.

Dynamic

It’s not about btc, these 3 people was all behind that nickname and they knew themselves in person, after first arrest they placed microphones and other shit, plus they registered their calls. Be aware big costumers, goodoo kept always the addresses of the buyers.

ShirouTP

The war on drugs and encryption needs to end it causes more harm than good.

Ricky

If there are any police reading this, go fuck yer self!

Meow

It appears as they have also busted the no1 vendor from Berlusconi X-Men.

123

Italian police used css exfil vulnerability, its not patched chrome/firefox, beacuse police use

https://www.mike-gualtieri.com/css-exfil-vulnerability-tester

Summary: A method is detailed - dubbed CSS Exfil - which can be used to steal targeted data using Cascading Style Sheets (CSS) as an attack vector. Due to the modern web’s heavy reliance on CSS, a wide variety of data is potentially at risk, including: usernames, passwords, and sensitive data such as date of birth, social security numbers, and credit card numbers. The technique can also be used to de-anonymize users on dark nets like Tor.
https://www.mike-gualtieri.com/posts/stealing-data-with-css-attack-and-defense

A Guy

In reply to123
Wednesday, Nov 13, 2019

@123

Interesting. With that css exfil vulnerability what is possible to know about tor users? Steal username passwords and browser fingerprint? Or also ip address?

About CSS exfil

In reply to123
Thursday, Nov 14, 2019

CSS exfil only capable of fingerprinting your browser, so its not that bad but not good either.

123

In reply to123
Thursday, Nov 14, 2019

Remotely hosted CSS used in content scripts can be used to leak data from the host page.

Synchronizer

Too bad.
g00d00 was a solid vendor shipping us at the least 1 kilo of Ketamine a week from Italy and France sometimes.
Guess he had a reshipper their.
Berlusconi was a very solid pilar reliable marketplace when shit was all over the place.
Too bad they never did get to implement XMR, as all marketplaces should.
I wonder how long did they have a gag order on the whole thing before they can catch other vendors like X-men..

sauce ?

@123, interesting theory ! what is your source ?

123

@sauce I’m working for Italian Police.

copssuckmydick

FUCK YOU POLICE!!!!!

You're not police

No real police is going to come here and explain how they took a market down with an exploit you’re so full of shit the sky has turned purple.

gringo

bla bla bla, all because of bitcoin , users are to lazy to use xmr and that will cost them ( lawyers at least ) ! bitcoin should be used as store value , xmr must be official dark net coin ! freedom is anonymous and anonymous is freedom !

123

@You’re not police

I’m not police. Read again: “Iā€™m working for Italian Police.”

Steve Carlos

I really love this sity

ok

When tails will include a Monero wallet ?

Popeye

So Berlusconi market was compromised since g00d00 arrest in May? or LE seized it and shut down the servers when they have arrested the Admin few weeks ago?

CSS is fake

It’s a real exploit for the website owner to fingerprint the users browsers! For those with weak minds if this exploit was used on Berlusconi they already had to be own the server aka this can’t take down a market.

Please use your brains.

123

In reply toCSS is fake
Friday, Nov 15, 2019

CSS is not fake just old af

@123 CSS attack is not fake just old af it is there since 2012….
And u can use it just to fingerprint users…..