Hackers Compromise 14,000 IP Cameras in Russia and Ukraine

A threat actor has reportedly compromised roughly 14,000 internet-connected cameras made by Dahua, in a campaign researchers are calling Operation CameraSwarm. The attacks focused on telecom networks in Russia and other CIS countries, though devices in Ukraine were also affected.

IP cameras are a common but often overlooked entry point for attackers. Many are deployed with default credentials, outdated firmware, or weak network segmentation, making them easy targets for mass exploitation campaigns like this one. Once compromised, such devices can be used for surveillance, as a foothold into wider networks, or recruited into botnets for further attacks.

While this specific campaign appears geographically targeted, it's a reminder that any organisation using internet-facing IoT devices—including security cameras—should treat them as part of their attack surface, not just physical security equipment.