Cyber Risks · The Hacker News

Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine

Summary: A July 10 advisory from the Dutch civilian and military intelligence services AIVD and MIVD says at least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine to watch military transport routes, weapons shipments bound for Kyiv, and Ukrainian troop locations. In Ukraine, the services say camera access has been used in attempts to neutralize military personnel and destroy equipment, while Censys counted more than 87,000 internet-connected cameras across the EU, NATO states, and Ukraine running a service version matching a known-exploited vulnerability, including over 4,000 in Ukraine.

Key Takeaway: The operators get in through default passwords, obsolete firmware, and factory settings nobody changed, with no zero-day required, and the Dutch services confirmed only a small number of breached cameras sitting directly on military logistics routes inside the Netherlands. A camera on a public IP hands an adversary a live read on when the trucks move and who comes and goes, without any deeper breach of the network.

Read the original at The Hacker News ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2016-7407CVE-2021-39275
Related