Ukrainian cybersecurity authorities have alerted the public that hackers are exploiting vulnerabilities in surveillance cameras manufactured by Chinese company Dahua. The breaches allow unauthorized access to video feeds and enable attackers to remotely control the devices. According to Ukraine’s computer emergency response team, hackers have successfully compromised internet-connected cameras and video recorders, altered their settings, and created unauthorized user accounts. The attacks appear to target a feature called Easy4IP, which permits remote access to Dahua devices through the manufacturer’s cloud service using predictable serial numbers.
The security risks are particularly concerning for Ukraine, given longstanding fears that Russian intelligence services could exploit surveillance cameras to gather military intelligence. Ukrainian authorities have previously secured approximately 40,000 cameras since Russia’s 2022 invasion and documented cases of hacked cameras being reconfigured to monitor military targets. A 2024 investigation identified roughly 24,000 Dahua and Hikvision cameras installed in municipal systems across Ukraine. Cybersecurity researchers identified two critical vulnerabilities from 2021 that may be exploited in the attacks, and previous reports documented thousands of compromised Dahua devices internationally.
Source: Read the full story at The Record
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
