On March 1st, a threat actor posted in an underground forum offering to buy a pharmaceutical called “Carenoxal” with a dose of 80mg. This pharmaceutical, OxyContin, a trading name for the narcotic oxycodone hydrochloride, is a painkiller available in the United States only by prescription. OxyContin is legitimately prescribed to relieve moderate to severe pain resulting from injuries, bursitis, neuralgia, arthritis, and cancer.
Figure 1: A threat actor offers to buy the “Carenoxal” from him
Getting a specific medicine isn’t always so easy. Most pharmaceuticals can only be purchased with a doctor's prescription, and some may not have the means to find or pay for medication. As a result, threat actors are selling pharmaceuticals on the underground for a higher price than the legal markets.
In the post above, a single tablet costs 35 euros. Moreover, buying 5 tablets will give the buyer a decent discount, and the price for one tablet drops to 24 euros. In addition, for 9 tablets, the average price for one drops approximately 21 euros.
To maintain complete anonymity, payment is made exclusively through Bitcoin.
Pharmaceuticals differ from most items sold on the dark web, the main reason is they are physical products. Due to this, the product requires a shipment. According to the post, the shipment is from Germany, delivered by Deutsche post mail, and arrives in 2-3 working days.
Figure 2: Proof of possession of the product
The dark web is the best option for many to acquire prescription drugs. Various underground marketplaces and forums sell them; buyers can purchase them without prescriptions or revealing them.
Cybersixgill automatically aggregates data leaks and alerts customers in real time.