Massive Cyberattack on Dahua IP Cameras

In a comprehensive cyberattack, more than 14,500 Dahua IP cameras were compromised within 35 days. Security researchers, who referred to this campaign as CameraSwarm, identified the main targets in Ukraine and Russia. The attackers exploited vulnerabilities in the cameras' firmware to gain unauthorized access. The attack began in July 2026 and primarily targeted private and public institutions. Researchers reported that the attackers employed a variety of techniques to infiltrate the cameras.

These included exploiting default passwords and inadequately secured networks. The vulnerability exploited in the attacks is found in the firmware of Dahua cameras. This flaw allows attackers to take control of the cameras and misuse them for various purposes. Researchers pointed out that many of the affected devices had not been regularly updated, increasing their vulnerability. The affected cameras are used in a variety of applications, including surveillance systems in cities, retail stores, and private households.

The attackers could use the cameras to collect sensitive information or even as part of a larger botnet for DDoS attacks. Security researchers advise users to promptly check their devices and ensure that the firmware is up to date. Dahua has already released an update to address the vulnerability. Users should also ensure that they use strong, unique passwords to prevent unauthorized access. The campaign not only affects the impacted users but also raises questions about the overall security of IoT devices.

Experts warn that such attacks may increase in the future if manufacturers do not take proactive security measures. The need to raise security standards for connected devices is becoming increasingly urgent. Investigations into the background of the attacks are still ongoing. So far, there are no official indications of the attackers' identity or their motivation. The security community is closely monitoring the situation to prevent potential further attacks.

The incidents surrounding the CameraSwarm campaign highlight the vulnerability of connected devices and the necessity for businesses and individuals to actively engage with cybersecurity. According to a recent survey, 67% of IT professionals believe that IoT devices will be a primary target for cyberattacks in the coming years. The vulnerability in the Dahua cameras is classified as CVE-2026-XXXX, with the exact CVE number yet to be published. Researchers recommend that all users of Dahua products promptly install security updates to protect themselves from potential attacks.