Dahua Cameras Hit by Massive Operation CameraSwarm Hack

A mass hacking campaign called Operation CameraSwarm compromised over 14,500 Dahua IP cameras within 35 days, primarily affecting devices in Ukraine and Russia. This operation utilized three attack vectors: credential brute-forcing, authentication bypasses (exploiting known CVEs), and P2P relay abuse, which allowed access with only a serial number. The attack exposed operators' files and tools, enabling detailed analysis of the breach. Recommendations for protection include updating firmware, changing default passwords, disabling P2P access, and adding firewalls.