Cyber Security News

Authorities Shut Down Kidflix Child Abuse Platform in Major Takedown

In one of the most significant operations against child sexual exploitation in recent history, authorities have announced the shutdown of “Kidflix,” one of the world’s largest platforms for the distribution of child sexual abuse material (CSAM).

The meticulously planned international operation, codenamed Operation Stream, was led by the State Criminal Police of Bavaria (Bayerisches Landeskriminalamt) and the Bavarian Central Office for the Prosecution of Cybercrime (ZCB), with the support of Europol and law enforcement agencies from over 35 countries.

A Harrowing Discovery

Kidflix, which was operational from 2021 until its shutdown in March 2025, attracted an alarming 1.8 million users globally.

The platform hosted approximately 91,000 unique videos of CSAM, totaling over 6,000 hours of recorded abuse.

Authorities revealed that the platform had a well-organized system allowing offenders to upload, stream, and download CSAM content. Users paid for access using cryptocurrencies, earning tokens by contributing to the platform’s operations.

Unlike other dark web platforms, Kidflix prioritized streaming functionality, making its content more accessible to offenders. Notably, the platform also allowed video previews with varying quality tiers, further monetizing child abuse content.

Unprecedented Results

The server hosting Kidflix was seized on March 11, 2025, in a joint effort by German and Dutch authorities. To date, the investigation has resulted in:

  • 1,393 suspects identified worldwide,
  • 79 arrests, including individuals who committed direct abuse,
  • 3,000 electronic devices seized, and
  • 39 children protected.

Europol has called this the largest child sexual exploitation operation in its history.

A Global Effort

The successful takedown of Kidflix was made possible through international collaboration and advanced cybercrime expertise.

Europol’s European Cybercrime Centre (EC3) played a pivotal role by analyzing vast amounts of video evidence and coordinating data sharing among nations.

Europol experts uncovered key leads that guided enforcement agencies to suspects and linked crimes across borders.

Bavarian authorities spearheaded action weeks from March 10–23, 2025. During this period, coordinated raids and arrests were made while new evidence surfaced.

Despite the platform’s closure, authorities emphasized the ongoing investigation, suggesting that more arrests and rescues are expected in the coming months.

Kidflix’s creator allegedly amassed significant illicit profits by exploiting children, further fueling the urgency behind the operation.

While the platform’s closure marks an important victory, law enforcement officials and child protection advocates stress that much work remains to eradicate this heinous crime.

International collaboration will continue to be a cornerstone in the fight against child sexual exploitation.

Europol’s Executive Director commended the effort, underscoring that protecting society’s most vulnerable is a collective responsibility: “This mission proves that together, we can dismantle even the most insidious criminal networks. The responsibility to protect children transcends borders.”

With ongoing investigations and global resolve, authorities are hopeful this landmark takedown will serve as a warning to offenders and a step toward justice for victims.

Find this News Interesting! Follow us on Google News, LinkedIn, & X to Get Instant Updates!

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

2 days ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

2 days ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

2 days ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago