Dahua surveillance cameras compromised in Ukraine

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert regarding unauthorized remote access to Dahua IP cameras and digital video recorders (DVRs). Attackers have successfully accessed video streams, altered device configurations, and created unauthorized third-party accounts.

The primary attack vector involves the Easy4IP peer-to-peer (P2P) platform. Hackers are exploiting the predictable structure of device serial numbers to conduct large-scale brute-force attacks. This allows them to identify cloud-connected devices even if they are not directly accessible via the internet.

Security breaches are further facilitated by the use of weak passwords and the exploitation of authentication bypass vulnerabilities in outdated firmware, specifically CVE-2021-33044 and CVE-2021-33045. Experts warn that compromising such infrastructure allows adversaries to ‘watch the watchers,’ gaining visibility into security procedures, personnel movements, and physical access controls.