Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses

CERT-UA has issued an alert about unauthorized remote access to Dahua IP cameras and DVRs across Ukraine. Attackers are exploiting P2P access features and authentication weaknesses to compromise surveillance systems. Incidents include unauthorized access to video streams, device configuration changes, and creation of rogue third-party accounts. The State Special Communications Service of Ukraine (SSSCIP) confirmed the recorded cases. The attacks target video surveillance infrastructure, posing significant risks to physical security monitoring, particularly in a wartime context. The campaign highlights the dangers of insecure IoT devices deployed in critical environments.