I recall a blackhat video on YouTube where they could access webcams and disable the LED, having a LED isn't a certain indication unless you know that it's not software activated. I have a Logitech and was able to control the LED using information given at the time ... can't recall the details now sorry.
A quick search on security.stackexchange reveals similar info.