Russian intelligence hijacks IP cameras to track NATO military logistics
This digest was compiled by AI from multiple sources — links to the originals are below.
Russian intelligence services are systematically hacking internet-connected security cameras across Europe and Ukraine to monitor military transport routes and weapons shipments, according to a July 10 advisory from the Netherlands' AIVD and MIVD. In Ukraine, the surveillance has been used to target Ukrainian military personnel and equipment. The advisory describes the operation as ongoing.
The Operation
At least one Russian intelligence service is hijacking IP cameras across EU and NATO states and Ukraine, using the feeds to watch military logistics, weapons shipments to Kyiv, and Ukrainian troop positions. The Netherlands' civilian and military intelligence services published the advisory on July 10, describing the operation as ongoing. In Ukraine, camera access has been used to neutralize Ukrainian military personnel and destroy equipment.
Vulnerability Surface
Attackers scan the internet for exposed devices, targeting cameras with default passwords, obsolete firmware, or factory settings. Image-recognition software automates searches for military vehicles and cargo. Censys, an internet-scanning firm, found over 87,000 internet-connected cameras across EU, NATO members, and Ukraine running a service with a known-exploited vulnerability, calling it a lower bound. More than 4,000 are in Ukraine.
Caveats and Scope
Censys notes that a publicly accessible camera is not necessarily hackable. Of the 45,386 cameras reachable in the Netherlands, only 1,992 ran a service with a known-exploited vulnerability; narrowing to camera software bugs drops the figure to 541. Two highlighted bugs, CVE-2016-7407 and CVE-2021-39275, were patched in 2016 and 2021 respectively, but 159 and 112 Dutch hosts still run vulnerable versions.
What's Next
The AIVD and MIVD urge organizations to change default passwords and update firmware. It remains unclear how many cameras across NATO states remain compromised or whether the operation will expand.
1 source
Russian intelligence hijacks IP cameras to track NATO military logistics
