Hackers Compromise 14,500 Dahua IP Cameras in 35-Day Campaign
Researchers dub operation CameraSwarm; devices primarily targeted in Ukraine and Russia
Key Takeaways
- Over 14,500 Dahua IP cameras compromised in a 35-day campaign dubbed CameraSwarm.
- Devices primarily targeted in Ukraine and Russia.
- Exploitation of vulnerabilities in Dahua IP cameras to gain unauthorized access.
- Compromised devices pose risks of surveillance, botnet recruitment, and network pivoting.
- Users advised to update firmware and secure camera configurations.
Quick answers
- What happened?
- A large-scale campaign attributed to hackers compromised over 14,500 Dahua IP cameras over a 35-day period, researchers report. The operation, dubbed CameraSwarm, primarily affected devices in Ukraine and Russia. The compromise of network-connected cameras raises concerns about surveillance, botnet recruitment, and network pivoting capabilities.
- Which products are affected?
- IP cameras
- What should defenders do?
- Update Dahua IP camera firmware to the latest available versions. Secure camera configurations by changing default passwords, restricting network access, and monitoring for unusual activity.
According to reporting by BleepingComputer, security researchers identified a large-scale campaign that compromised more than 14,500 Dahua IP cameras. The operation, tracked under the name CameraSwarm, occurred over a 35-day period and was reported on August 19, 2026. The vast majority of compromised devices were located in Ukraine and Russia. The method of exploitation involved vulnerabilities in Dahua IP cameras, though specific exploitation techniques were not detailed in the available summary. Compromised cameras could potentially be used for surveillance purposes, botnet recruitment, or as pivot points into broader networks. Dahua has not been reported to issue a specific security advisory regarding this campaign in the provided excerpt. Security researchers recommend that users update Dahua firmware to the latest available versions and secure camera configurations to mitigate the risk of compromise.
Security Details
Hackers exploited vulnerabilities in Dahua IP cameras to gain unauthorized access across a 35-day campaign. The specific vulnerability details were not provided in the source summary. Compromised devices were concentrated in Ukraine and Russia.
Affected products
IP cameras
Mitigation
Update Dahua IP camera firmware to the latest available versions. Secure camera configurations by changing default passwords, restricting network access, and monitoring for unusual activity.
Sources
BleepingComputer
Hackers compromise 14,500 Dahua web cameras in 35-day campaign
Aug 19, 2026 · 18:09
Original link
Related Security News
Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams
Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The sentencing, reported by BleepingComputer in September 2026, concluded a federal case targeting individuals who abused their military backgrounds to conduct financially motivated email fraud. The attacks spanned multiple years prior to sentencing, though specific victim counts and total financial losses were not detailed in the reporting. The case underscores the legal consequences of using military credentials and training for cyber-enabled fraud.
