Take down the least throughly compromisable and wait a few days.
Take down the second most compromisable, have a press conference and say the op is done.
Wait as long as is politically defensible, then take down the most compromisable.
1 & 2 already presumably happened.
I don't know the setups of any of these sites, but God Mode in terms of compromise would be breaking GPG for buyer to seller communication.
The only feisable way of doing this is serving fake vendor public keys to users or otherwise bypassing GPG encryption.
If the site offers to encrypt clear text messages for users, then they would just grab clear text first.
If the site displays the vendors public key, they could replace those with poisoned duplicates, decrypt and grab cleartext, then reencrypt with proper key and send to vender.
This would get noticed if done all at once or persistently, but if you set it up so poisoned keys are only shown to some users under some circumstances (like after a particular user has viewed the store, not viewed the public key page previously, etc), then you could probably manage to nab a lot of clear text before it got noticed.
And when a user caught it, and if they report it, no one else would be able to verify such claims by simply checking themselves.
And even after all that, most people would probably assume this was due to individual vender compromise, not a systematic, selective man in the middle attack.
The effectiveness of this attack could be further optimized by monitoring the few outlets available to discuss such topics and prevent tampering with the keys of any vender implicated there.
The only safeguard against this attack is checking the provided public key against a pubic keypool server and inspecting the date of creation, and making sure it wasn't backdated as well. I highly doubt even the most hardcore opsec buyers go to such lengths every time, if at all.
they say hanse had been compromised since june 20th... so does that mean they've been honey potting the shit out of everyone? My friend literally just placed an order 3 days ago, what do you think the chances are of a CD? it was less then 300$ in value...