BANGKOK — Thai police and US Homeland Security Investigations (HSI) have jointly apprehended a German national who operated multiple dark web sites distributing child sexual abuse material, officials announced at a press conference today at CIB.
The suspect, identified only as Steffen, was arrested on March 5 in Chonburi province after a months-long international investigation. Authorities seized computer servers, laptops, mobile phones, storage devices, bank accounts, and other evidence totaling 36 items. Digital forensic examination uncovered more than 140,000 files containing illicit material.
According to Police Lieutenant Jirayu Wongwiwat, deputy inspector at TCSD, the investigation began in December 2024 when HSI contacted Thai authorities about suspicious dark web activities linked to Thailand.
The subsequent investigation identified Steffen, a retired programmer who had moved to Thailand and established two dark web sites with over 5,000 videos, primarily featuring minors.
The sites operated on a subscription model requiring cryptocurrency payments, with a minimum entry fee of $10 in Bitcoin or Monero. Investigators found that the suspect had approximately 10,000 members on his platforms. After receiving cryptocurrency payments, Steffen would transfer funds through multiple digital wallets before converting them to Thai baht for personal use. Authorities estimate his earnings from these operations at around $100,000.
During questioning, Steffen admitted to using his programming expertise to create and manage the websites using Tor control panel and WampServer software. Investigators also discovered he was selling spyware through the dark web for $16.95 per month (approximately 572 baht), which could capture phone conversations, keystrokes, notifications, location data, and access files on compromised devices.
The suspect faces multiple charges including possession and distribution of child sexual abuse material, importing and exporting illicit content, operating a commercial enterprise involving exploitation material, and inputting illegal computer data accessible to the public.
Officials explained that Steffen, who had also overstayed his visa, will be prosecuted in Thailand since the crimes were committed in Thailand. After the court’s judgment, he must serve his sentence in Thailand before being deported and subsequently blacklisted.
__________
