CYBERSECURITYTRACKER
TRACKING
Permanent story citation

Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4796

As cited

Copy frozen at (site build).

threat intel

Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia

A threat actor conducted Operation CameraSwarm, compromising approximately 14,000 Dahua IP cameras across Ukraine and Russia by targeting telecom infrastructure in Russian and Commonwealth of Independent States (CIS) netblocks. The campaign appears to focus on internet-exposed camera systems in critical telecommunications networks.

Why it matters: Telecom operators, ISPs, and organizations across Russian and CIS regions using Dahua cameras need to audit exposed camera instances immediately and apply Dahua security patches; compromised cameras can serve as reconnaissance tools or pivots into network infrastructure.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary