Ukraine’s CERT-UA has issued an alert saying attackers are compromising Dahua IP cameras and related video recorders connected to the internet. The warning describes unauthorized remote access to live video streams, changes to device configurations, and the creation of third-party user accounts.
The reports frame the activity as exploitation of access and authentication weaknesses in the Dahua devices used in Ukraine. While one outlet highlights the technique more broadly as involving P2P-based access and weak authentication, another focuses on the sourcing of the hardware—Chinese-made surveillance equipment—and notes the specific kinds of actions seen after compromise. Both accounts attribute the key details to CERT-UA and the Ukrainian state communications body that issued the underlying statement.
