{
  "id": 16721632,
  "title": "Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses",
  "url": "https://urgent.news/2026/10/27/attackers-hijack-dahua-ip-cameras-in-ukraine-using-p2p-access-and",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-27T06:34:47.000Z",
  "source": {
    "name": "The Hacker News",
    "slug": "the-hacker-news",
    "url": "https://thehackernews.com/2026/10/attackers-hijack-dahua-ip-cameras-in.html"
  },
  "original_language": "en",
  "account": "Ukraine's Computer Emergency Response Team (CERT-UA) has issued a warning about unauthorized remote access to Dahua IP cameras and DVRs. These devices have been compromised through Easy4IP, a peer-to-peer platform allowing remote monitoring via smartphone apps or web browsers. The threat actors exploit predictable serial numbers and weak passwords, as well as outdated firmware vulnerabilities like CVE-2021-33044 and CVE-2021-33045. Once access is gained, attackers change device configurations, create third-party accounts, and deploy persistent backdoors. Similar activity has been reported in Russia, targeting similar devices. CERT-UA advises disabling the P2P feature if not needed, avoiding direct internet exposure, and keeping software updated.",
  "summary": "The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. \"Cases of compromising IP cameras and DVRs with access to the video stream, changing the device configuration and creating third-party accounts have been recorded,\" the State Special Communications Service of Ukraine (SSSCIP)",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}