He’s not Pablo Escobar, not by a long shot.
But authorities say Gal Vallerius is a modern version of a cartel kingpin, operating anonymously as a lord of the internet’s “dark web” bazaar where buyers and sellers conduct cocaine, fentanyl, meth, LSD and oxycodone deals in the virtual currency bitcoin.
Vallerius, 38, recently made the mistake of traveling from his base in France to Texas to compete in a world beard-growing championship in Austin. After arriving on Aug. 31 in Atlanta, the brown-bearded Vallerius was arrested by U.S. authorities on a distribution complaint filed in Miami federal court.
“A border search of his laptop upon his arrival at Atlanta International Airport confirmed his identity as ‘OxyMonster,’ ” according to a Drug Enforcement Administration affidavit. Vallerius’ laptop also contained the Tor browser, which allows users to conceal their true internet protocol addresses on that network; his log-in credential for Dream Market, an eBay-type marketplace for illegal narcotics and drug paraphernalia; and $500,000 worth of bitcoin.
Vallerius chose not to contest his identity and detention at a court hearing in Atlanta. His defense attorney there could not be reached for comment. Vallerius is soon expected to be transferred to Miami to face a new conspiracy indictment that carries up to life in prison.
Tracking down Vallerius — the biggest of a half-dozen dark web targets charged over the past year in South Florida — was not easy. It involved the DEA, FBI, IRS, Homeland Security Investigations and the U.S. Postal Inspection Service.
Vallerius played the secret role of an “administrator” and “moderator” on Dream Market, a dark web site that allows illicit drug sellers and buyers to make deals in Europe and the United States without revealing their true identities, according to federal prosecutor Francisco Maderal. The underground web site is not only a marketplace, it provides technical assistance, resolves disputes and posts reviews of vendors. And, like eBay, Dream Market charges a commission on every transaction as a percentage of the sales price.
“The Dream Market web site is specifically designed to facilitate illegal commerce by working to ensure the anonymity of its administrators, as well as the buyers and sellers who participate in commerce on the web site,” according to the DEA affidavit. It noted that at the end of August, there were more than 94,000 listings, including drugs such as opioids, ecstasy and steroids.
In January of this year, DEA agents logged into Dream Market’s home page and clicked a link called “Forum,” which allows sellers, buyers and administrators to discuss anything for sale on the dark web, according to the affidavit. While browsing the forum, agents navigated to a topic called “Official Staff” under the “Announcements” tab. The first posting was written by “OxyMonster,” Vallerius’ alias, though agents had not made that connection yet. Agents clicked on “OxyMonster” and were taken to his profile, which said he was a senior moderator.
This summer, agents also identified “OxyMonster” as a vendor on Dream Market who shipped from France to anywhere in Europe as well as to the United States, the affidavit said. Agents analyzed his posts on the Dream Market forum, including tips on how to stay anonymous on the dark web. In August, agents learned that “OxyMonster” was using a certain bitcoin address for the sales transactions.
Working as a cyber security solutions architect, Alisa focuses on bug bounty and network security. Before joining us she held a cyber security researcher positions within a variety of cyber security start-ups. She also experience in different industry domains like finance, healthcare and consumer products.