South Korean authorities have extradited a Chinese national accused of masterminding a sophisticated international cybercrime network that targeted high-profile individuals, including BTS member Jungkook, in a sprawling multi-million-dollar hacking and financial fraud operation.
According to the Ministry of Justice and the National Police Agency (NPA), the 40-year-old suspect was extradited from Bangkok and arrived at Incheon International Airport on Tuesday, where he was immediately taken into custody for intensive investigation.
Authorities allege the syndicate is responsible for stealing over 38 billion won (approximately $25.4 million) through coordinated cyber intrusions and identity theft schemes.
Police officials confirmed that a formal arrest warrant will be sought following interrogation and detailed forensic analysis of digital evidence linked to the case.
Investigators believe the cybercrime ring operated across multiple countries with its core base allegedly established in Thailand. Between August 2023 and April 2025, the group reportedly executed a series of highly organized cyberattacks on government and public agency databases, illegally harvesting sensitive personal data belonging to celebrities, corporate executives, and startup founders.
Authorities said the stolen identities were then weaponized to create unauthorized mobile accounts and bypass strict identity verification systems, enabling the suspects to infiltrate banking platforms and cryptocurrency wallets.
Among the most high-profile victims was global K-pop sensation Jungkook of BTS. Investigators revealed that the group allegedly attempted to open fraudulent brokerage accounts in his name in January 2024, aiming to transfer HYBE shares valued at approximately 8.4 billion won.
However the attempt was swiftly detected and neutralized after Jungkook’s agency, BigHit Music, intervened and froze the accounts preventing any financial loss.
The extradited suspect is the second key figure linked to the network to be brought to South Korea from Thailand. Another 36-year-old Chinese national previously extradited in August last year has already been indicted and is currently standing trial under detention.
Authorities stated that both suspects were initially placed under provisional arrest in response to South Korea’s request in May last year, followed by formal extradition proceedings in August.
The coordinated international operation involved Interpol, the National Police Agency, and Thai law enforcement, which also led to the arrest of several additional members of the cybercrime ring.
Officials emphasized that the government remains committed to dismantling transnational cybercrime syndicates and strengthening global cooperation to combat increasingly sophisticated digital financial crimes targeting individuals and institutions worldwide.
