Do Son 
TL;DR
International law enforcement arrested 354 suspects during Operation TorNado, the largest darknet vendor crackdown in history. Led by the Department of Justice and Europol, this Operation TorNado dark web takedown seized over $234 million in cash and virtual currencies alongside 5.7 metric tons of illicit narcotics. Furthermore, investigators linked several arrested vendors to fatal fentanyl and synthetic opioid overdoses across the United States.
What Happened in the Operation
Between May 2025 and October 2026, the Joint Criminal Opioid and Darknet Enforcement (JCODE) team partnered with Europol to track illicit sellers across seized platforms including Archetyp, Bohemia, Nemesis, Kingdom, Tor2Door, and DrugHub. According to the Department of Justice announcement, authorities arrested 132 suspects in the United States, 59 in the United Kingdom, 45 in Hungary, 41 in Germany, and 23 in France, alongside additional arrests across eight other nations.
“Operation TorNado is the largest interagency takedown of Dark Web drug vendors and buyers to date, resulting in 354 arrests worldwide, including 132 in the United States,” said FBI Director Kash Patel. In addition to confiscating $234 million in assets, agents seized 209 firearms and 38 pill presses.
Who Is Behind the Activity
Using forensic data from earlier market seizures and financial tracing from IRS Criminal Investigation, authorities attributed anonymous vendor handles to real-world suspects with high confidence. In Florida, agents arrested brothers Stanislav Chernyshov, 30, and Vladislav Chernyshov, 35, for allegedly running the “BarbaraWhite” account, which shipped over 1,000 parcels of nitazene-laced counterfeit pills across 49 states. Meanwhile, prosecutors charged Alexander Green, 32, in Ohio for allegedly operating the “STARLABS” vendor account on the Monero-only DrugHub market. Authorities also arrested Jonatan Gonzales (“SpeedyPharma”) in California, Eric Turner and Jose Smith (“Postmates” and “FuegoPacksXpress”) in Georgia and Florida, and five suspected members of a New York and New Jersey distribution cell.
Impact and How to Stay Protected
Prosecutors linked the counterfeit pills sold by these darknet vendors to multiple fatal and non-fatal overdoses nationwide. “The dark web is not a safe haven for criminals,” said Homeland Security Investigations Acting Executive Associate Director John A. Condon. Following this Operation TorNado dark web takedown, health officials warn the public never to purchase prescription medications from unverified online sources, as counterfeit pills frequently contain lethal doses of fentanyl or nitazenes.
Support Our Threat Intelligence
Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
