Science & Tech · Cybersecurity · 2 hrs ago
Ukraine warns of attacks on Dahua surveillance cameras
Ukraine’s CERT-UA has warned that hackers accessed Dahua cameras and video recorders, changing settings and creating unauthorized accounts.
The devices are made by Chinese company Dahua and are used in homes and businesses, as well as by some Ukrainian public institutions and military units.
The attacks appear to exploit Easy4IP, a feature that lets users view cameras remotely through Dahua’s cloud service.
CERT-UA says predictable device serial numbers can help attackers find cameras with this feature enabled, while weak passwords or outdated software can let them in.
The agency has not said how many devices were affected or who was responsible, and it is unclear whether any belonged to government or military organizations.
A separate campaign reportedly compromised more than 14,500 Dahua devices, but it is not known whether that activity is connected to CERT-UA’s warning.
CERT-UA advises disabling remote access if it is not needed and updating device software; it also recommends not exposing cameras directly to the internet.
Ukraine’s CERT-UA has warned that hackers are gaining unauthorized access to Dahua cameras and video recorders.
The agency said attackers have changed device settings and created unauthorized accounts.
Attackers can use Dahua’s Easy4IP remote-access feature and predictable device serial numbers to identify cameras connected to the cloud.
Weak passwords and flaws in outdated firmware can then help attackers bypass authentication.
CERT-UA did not say how many devices were affected, when the incidents occurred or who was responsible.
- Who
- Hackers gained access to Dahua surveillance devices. CERT-UA issued the warning.
- What
- Attackers accessed video feeds, changed device settings and created unauthorized accounts.
- When
- CERT-UA said the cases were identified late the previous week; it did not state when the attacks occurred.
- Where
- Ukraine.
- Why
- Not stated.
This story does not have two clearly opposing sides.
Ukraine’s SBU said Russian intelligence services had hacked two cameras in Kyiv and used them to monitor air defense activity and critical infrastructure.
A separate campaign reportedly compromised more than 14,530 Dahua cameras.
Hunt.io researchers reported that hackers had compromised more than 14,500 Dahua devices earlier in the summer.
CERT-UA issued its warning about unauthorized access to Dahua cameras and video recorders.
- Affected manufacturer
- Dahua
- Remote-access feature
- Easy4IP
- Firmware vulnerabilities
- CVE-2021-33044 and CVE-2021-33045
- Reported separate campaign
- More than 14,530 cameras, June 17–July 22, 2026
- CERT-UA device count
- Not disclosed
2 sources
What people are saying
The assumption that the serial number is unknown to anyone is not a reason to consider the device secure
Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating third-party accounts have been recorded