117 held in multi-year child predator crackdown [WATCH]

KUALA LUMPUR: Malaysia’s multi-year crackdown on online child predators has reached a major milestone, with four successive operations resulting in 117 arrests and at least 101 charges.

The operations involved the processing of more than 1.4 million digital files containing Child Sexual Abuse Material (CSAM).

The latest operation, Operation Cyber Guardian 2026, a sweeping regional offensive conducted on April 6-8, saw 69 individuals arrested, 101 locations raided and 204,934 confirmed CSAM files recovered, making it the most successful iteration of the initiative to date.

Experts warn that technology has fundamentally changed the nature of the threat.

Professor Dr Selvakumar Manickam, director of the Cybersecurity Research Centre at Universiti Sains Malaysia, described the shift in alarming terms.

“Just as budget airlines democratised the skies, artificial intelligence (AI) has democratised the underworld.

[[nid:1447602]]

“No experience required, no borders and, apparently, no shame. A single offender can now use Generative AI to sustain personalised, emotionally attentive conversations with dozens of children simultaneously,” he said.

This technology allows predators to mirror a child’s interests, adapt their language to sound age-appropriate, and build trust over time, all without being actively present in the conversation.

The threat is compounded by deepfake technology. Selvakumar said Malaysia currently ranks second globally in deepfake scam losses, trailing only the United States.

“If adults are being so easily deceived by these deepfakes, our children simply do not stand a chance when this technology is weaponised against them,” he warned.

Professor Dr Ainuddin Wahid Abdul Wahab, from the Centre of Research for Cybersecurity and Network (CSNET), Universiti Malaya, cautioned that the scale of recovered files, while significant, likely represents only a fraction of what exists.

“Thousands of other files are permanently lost to what I would describe as ‘digital ash’, destroyed through zero-fill wipes and anti-forensic tactics that erase vital metadata, including GPS coordinates and timestamps, leaving victims unidentified.

“The work of digital forensic investigators is not unlike reconstructing a charred diary, where every page turned to ash represents a child whose rescue is delayed,” he said.

He further warned that automated platform scanners are failing to detect the full scope of these networks.

“These systems look only for exact matches. That leaves them completely blind to predators who alter digital fingerprints or use steganography to disguise illicit content.

“The evolution of these criminal methods mirrors a biological virus mutating to bypass a vaccine; each time authorities build a digital wall, predators develop new tools to circumvent it,” he said.

[[nid:1447601]]

“Predators are increasingly using adversarial AI to bypass age verification. If a platform uses facial analysis to estimate age, a determined predator can use deepfake overlays or generative adversarial networks to create a synthetic digital persona that mimics a child’s facial structure and speech patterns. If we rely solely on hard verification such as identity document uploads, we risk data privacy leaks,” he said.

He cautioned that softer AI-based verification systems are equally vulnerable.

“If we rely on soft AI verification, predators will study the algorithm’s weaknesses to find the blind spot. Our research suggests that technology alone is not a silver bullet. Our security systems must be immune-responsive, constantly learning from the predator’s attempts to bypass the gate, rather than simply standing watch at the door,” he said.

Operation Cyber Guardian 2026 also exposed a structural shift in how these crimes are organised.

Predator networks have evolved from isolated “hit-and-run” offenders to cross-border syndicates that deliberately exploit legal loopholes, including varying national definitions of CSAM and delays in mutual legal assistance requests.

Fong Choong Fok, executive chairman of LE Global Services, a leading cybersecurity firm in Malaysia, said that while distribution methods remain rooted in the dark web and closed forums, some syndicates are making critical errors that aid investigators.

“The use of e-wallets is an elementary mistake. Professionals in this space transact in cryptocurrency precisely because it is harder to trace. When offenders resort to e-wallets, they expose themselves directly to law enforcement, and that has proven to be a significant advantage for investigators,” he said.

However, Fong cautioned that sophisticated operators are increasingly using AI-generated avatars and voice changers to remain completely untraceable.

[[nid:1447600]]

“AI is a double-edged sword. Creating another personality using AI is now very simple. Criminals today will not show their real faces — even their voice is changed so they cannot be traced back,” he said.

Despite the scale of the operation, experts stressed that technology alone cannot protect children.

“Using technology to limit age is never 100 per cent effective. What is more effective is how parenting and the education system can teach teenagers what is right and what is not in the cyber world,” he said.

Professor Selvakumar also warned that detection often occurs only after irreversible harm has been done.

He called for a shift in enforcement strategy, moving from reacting to abuse towards total prevention.

The campaign originated with Op Pedo 1.0, launched on Dec 23, 2024, as a domestic effort by the police and the Malaysian Communications and Multimedia Commission.

© New Straits Times Press (M) Bhd

المصدر: New Straits Times