Cybersecurity researchers report that a hacking campaign compromises more than 14,500 Dahua web cameras over about 35 days. Hunt.io says the activity, codenamed Operation CameraSwarm (also referred to by researchers as CameraSwarm), runs from June 17 to July 22, 2026, with victims identified through reconstruction of an exposed working directory containing thousands of files.
According to the reports, the campaign uses credential attacks and two authentication-bypass flaws, along with a peer-to-peer (P2P) relay technique to facilitate access and communication. Bleeping Computer adds geographic context, saying the compromised devices are mostly located in Ukraine and Russia, while Hunt.io focuses on how researchers reconstructed the campaign and what methods were involved.
