South Korea arrests four for hacking 120,000 cameras in mass exploitation scheme

South Korea arrests four for hacking 120,000 cameras in mass exploitation scheme

South Korean police arrested four individuals on Sunday for allegedly infiltrating over 120,000 internet-connected cameras in homes and businesses, using the footage to create sexually exploitative content distributed on an overseas website.

Exploitation of IP camera vulnerabilities

The suspects exploited weak security measures in Internet Protocol (IP) cameras-commonly used for home security, child monitoring, or pet surveillance-by targeting devices with simple or default passwords. Hacked locations included private residences, karaoke rooms, a pilates studio, and a gynecologist's clinic, according to authorities.

Scale of the operation

Police confirmed the four suspects acted independently, with no evidence of coordination. One individual allegedly compromised 63,000 cameras, producing 545 exploitative videos sold for 35 million won ($12,235; £9,250) in virtual assets. Another hacked 70,000 cameras, selling 648 videos for 18 million won. Together, these two suspects accounted for roughly 62% of the content posted in the past year on the illicit website.

Law enforcement response

Authorities are working to dismantle the website and collaborate with international agencies to identify its operator. Three additional arrests were made for purchasing or viewing the material. Cyber investigation chief Park Woo-hyun emphasized the severity of the crimes, stating, "IP camera hacking and illegal filming cause immense harm to victims. We will pursue rigorous investigations to eradicate these offenses."

"Viewing or possessing illegally filmed videos is also a serious crime, and we will actively investigate such cases."

Park Woo-hyun, Cyber Investigation Chief, National Police Agency

Victim support and prevention efforts

Police have notified or visited victims at 58 locations, offering guidance on password changes and content removal. The National Police Agency urged users to "remain vigilant and regularly update access passwords" to prevent further breaches.