Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating third-party accounts have been recorded," the State Special Communications Service of Ukraine (SSSCIP)
Ukraine's Computer Emergency Response Team (CERT-UA) has issued a warning about unauthorized remote access to Dahua IP cameras and DVRs. These devices have been compromised through Easy4IP, a peer-to-peer platform allowing remote monitoring via smartphone apps or web browsers. The threat actors exploit predictable serial numbers and weak passwords, as well as outdated firmware vulnerabilities like CVE-2021-33044 and CVE-2021-33045.
Once access is gained, attackers change device configurations, create third-party accounts, and deploy persistent backdoors. Similar activity has been reported in Russia, targeting similar devices. CERT-UA advises disabling the P2P feature if not needed, avoiding direct internet exposure, and keeping software updated.
Written by urgent.news from The Hacker News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
