Skip to content

Threat actors are selling prescription pharmaceuticals on underground internet markets

The dark web market for illicit prescription drugs is thriving

On March 1st, a threat actor posted in an underground forum offering to buy a pharmaceutical called “Carenoxal” with a dose of 80mg. This pharmaceutical, OxyContin, a trading name for the narcotic oxycodone hydrochloride, is a painkiller available in the United States only by prescription. OxyContin is legitimately prescribed to relieve moderate to severe pain resulting from injuries, bursitis, neuralgia, arthritis, and cancer.

Figure 1: A threat actor offers to buy the “Carenoxal” from him

Getting a specific medicine isn’t always so easy. Most pharmaceuticals can only be purchased with a doctor's prescription, and some may not have the means to find or pay for medication. As a result, threat actors are selling pharmaceuticals on the underground for a higher price than the legal markets.

5 Cybersecurity Predictions For 2023
5 Cybersecurity Predictions For 2023 Learn how to protect yourself against a record-breaking year of cybersecurity breaches and attacks What is unique about the world we are in now – is that it is not just increasingly sophisticated technology escalating cyber conflicts – but the changing vectors of…

In the post above, a single tablet costs 35 euros. Moreover, buying 5 tablets will give the buyer a decent discount, and the price for one tablet drops to 24 euros. In addition, for 9 tablets, the average price for one drops approximately 21 euros.

To maintain complete anonymity, payment is made exclusively through Bitcoin.

Pharmaceuticals differ from most items sold on the dark web, the main reason is they are physical products. Due to this, the product requires a shipment. According to the post, the shipment is from Germany, delivered by Deutsche post mail, and arrives in 2-3 working days.

Figure 2: Proof of possession of the product

The dark web is the best option for many to acquire prescription drugs. Various underground marketplaces and forums sell them; buyers can purchase them without prescriptions or revealing them.

Cybersixgill automatically aggregates data leaks and alerts customers in real time.