Dream Market Admin 'Speedstepper' Arrested for Crypto and Gold Laundering
The administrator of the defunct darknet marketplace, Dream Market, known as ‘Speedstepper,’ has been apprehended in Germany for laundering millions of dollars via cryptocurrency and gold. According to Cyber Updates - Asher Tamam, the platform, which ceased operations in 2019, left behind ‘Dream Wallets’ containing accumulated commission fees from illicit drug sales and stolen data. These funds remained dormant for years.
The critical error made by ‘Speedstepper’ was reconnecting to the private keys and initiating the movement of these funds on the blockchain, aiming to cash them out. To monetize the illicit gains in the physical world, he used a U.S.-based crypto service provider to convert the digital assets into physical gold bars. These gold bars were then directly shipped to his residence in Germany, as reported by Cyber Updates - Asher Tamam.
This move provided law enforcement agencies, including the DEA, IRS, and German Police, with the necessary trail to track his activities. A coordinated raid on his home resulted in the seizure of $1.7 million worth of gold bars, alongside an additional $1 million found in cryptocurrency and bank accounts. This case underscores the persistent efforts of authorities to pursue cybercriminals, even years after their operations conclude.
What This Means For You
- If you're tracking darknet market activity, this arrest confirms that law enforcement's long game is real. Attackers who think they've gone cold will eventually make a mistake moving funds. For CISOs, this highlights the critical importance of robust financial forensics and collaboration with law enforcement, even for historical breaches where funds might be moving quietly in the background.
🛡️ Detection Rules
3 rules · 6 SIEM formats3 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.