South Korean police arrest four in massive IP camera hacking scheme

South Korea’s National Police Agency has arrested four people accused of hacking more than 120,000 internet-connected video cameras in homes and businesses and selling sexually exploitative footage through an overseas website. The arrests were announced Sunday following a months-long cyber investigation that uncovered large-scale intrusions into Internet Protocol cameras used for home monitoring and small-business security.

Investigators determined that each suspect operated independently, exploiting weak or default passwords to access cameras installed in private residences and commercial spaces. Compromised locations included homes, karaoke rooms, a pilates studio and a gynecology clinic. The devices, commonly marketed as low-cost alternatives to closed-circuit security systems, connect to local networks and are often exposed to simple credential attacks.

One suspect is accused of hacking 63,000 cameras and creating 545 videos that were sold for 35 million won in virtual assets. Another allegedly accessed 70,000 cameras and produced 648 videos, generating 18 million won. Two of the suspects were responsible for roughly 62 percent of the videos uploaded in the past year to a website specializing in voyeuristic and sexually exploitative IP camera footage. Additional suspects are accused of hacking thousands more devices and, in at least one case, producing content involving minors.

Police have begun proceedings to block and dismantle the website and are working with foreign agencies to identify the operator. Three individuals suspected of purchasing or viewing the illicit material have also been arrested as part of a broader crackdown on consumers of the footage.

Authorities have identified victims at 58 locations and have provided direct notifications and guidance on securing devices, including immediate password changes. Efforts are underway to remove and block the illegally obtained content and to locate additional victims.