Operation TorNado Results in 354 Arrests Across Dark Web Marketplaces in 14 Countries

Law enforcement agencies from 14 countries conducted Operation TorNado between May 2025 and October 2026, targeting vendors and buyers on the Archetyp, Nemesis, Tor2Door, Bohemia, and Kingdom dark web marketplaces. The operation led to the arrest of 354 suspects and the seizure of more than €210 million in cash and cryptocurrency, along with large quantities of illicit drugs and firearms in both Europe and the United States. Europol supported national investigations through cross-checks via SIENA and forensic analysis, while also addressing activity on forums, single-vendor shops, and encrypted messaging services. The U.S. Department of Justice noted that the effort built on intelligence from the prior JCODE operation to disrupt online opioid trade. Operation TorNado follows earlier actions such as DisrupTor in 2020, Dark Huntor in 2021, the Hydra takedown in 2022, Operation SpecTor in 2023, and Operation RapTor in 2025.

BleepingComputerTranslated from English

Read at source

Law enforcement authorities from 14 countries have arrested 354 suspects in a coordinated international operation targeting dark web marketplaces. Codenamed Operation TorNado, the action ran from May 2025 to October 2026 and focused on vendors and buyers active on the Archetyp, Nemesis, Tor2Door, Bohemia, and Kingdom platforms.

Europol stated that national authorities carried out independent investigations with support including cross-checks via SIENA and forensic analysis. The operation also targeted activity on forums, single-vendor shops, and encrypted messaging services. Authorities highlighted the continuing resilience of dark web marketplaces despite repeated takedowns.

In Europe, officers seized over €60 million ($66 million) in cash and cryptocurrency, 950 kilograms of illicit drugs including amphetamines, cocaine, ketamine, psilocybin mushrooms, MDMA, and cannabis, plus 57 firearms. In the United States, more than 4.8 metric tonnes of illicit drugs, 152 firearms, and over €150 million ($166 million) were confiscated.

The U.S. Department of Justice explained that intelligence gathered after the previous JCODE operation enabled identification of dark web drug traffickers, leading to complementary investigations. The effort significantly disrupted the online opioid trade and demonstrated that criminals on the dark web remain within reach of law enforcement.

Operation TorNado continues a series of similar actions over the past six years. These include DisrupTor in 2020 (179 arrests), Dark Huntor in 2021 (150 high-volume vendors apprehended), the 2022 takedown of Hydra (the largest dark web marketplace at the time with over 19,000 seller accounts), Operation SpecTor in 2023 (288 arrests and €50.8 million seized), and Operation RapTor in May 2025 (270 arrests across ten countries).

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Fraud & Social Eng

Nvidia Probes Suspected Chinese Espionage Targeting CEO Jensen Huang Through Personal Relationship
Dutch Police Warns Users of Suspicious Online Platforms That Activity Is Visible
US Charges Three Men with $129 Million Theft Using AI Deepfakes to Impersonate Executives